95.216.186.40200 OK 2.8 kB URL User Request GET HTTP/1.1 IP 95.216.186.40:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectxn--r1a.website
Fingerprint90:19:60:05:73:94:BE:17:50:B3:C1:4D:10:48:13:AA:FB:37:3D:BB
ValidityWed, 18 Oct 2023 08:37:07 GMT - Tue, 16 Jan 2024 08:37:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1493), with CRLF line terminators
Hash 5da77553b5825480f870528ac00d8940
61dda629929c7f541d8ab146a56fc58642d7c895
08c759bb6c952be661f704f1efb789d539e904d67611536cc62f4c2f6d23ec44
GET / HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Nov 2023 17:20:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=jjkksj7eteo2kekkos5v1h3mvk; path=/
lang=en
Strict-Transport-Security: max-age=0
Content-Encoding: gzip
xn--r1a.website/s/telegram
95.216.186.40200 OK 20 kB URL GET HTTP/1.1 xn--r1a.website/s/telegram
IP 95.216.186.40:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectxn--r1a.website
Fingerprint90:19:60:05:73:94:BE:17:50:B3:C1:4D:10:48:13:AA:FB:37:3D:BB
ValidityWed, 18 Oct 2023 08:37:07 GMT - Tue, 16 Jan 2024 08:37:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1267)
Hash 31f53e3da83f4bb8b08f0a21c51a6314
9de699f39a5216b9c92e3fd61872828d92d9d452
3bb01a1257ae4e39a7ec2f0a7f50816cad1fc8bdeef4b82d569ab77c7294a81c
GET /s/telegram HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Cookie: PHPSESSID=jjkksj7eteo2kekkos5v1h3mvk; lang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Nov 2023 17:20:22 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-control: no-store
Strict-Transport-Security: max-age=35768000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
xn--r1a.website/style.css
95.216.186.40200 OK 735 B URL GET HTTP/1.1 xn--r1a.website/style.css
IP 95.216.186.40:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectxn--r1a.website
Fingerprint90:19:60:05:73:94:BE:17:50:B3:C1:4D:10:48:13:AA:FB:37:3D:BB
ValidityWed, 18 Oct 2023 08:37:07 GMT - Tue, 16 Jan 2024 08:37:06 GMT
File type ASCII text, with very long lines (1308), with CRLF line terminators
Hash c75486476bd17bd707cbb81540acb77f
1976b27a60ae2fb8f70211c24ed9062118342339
0940842235fcfbe39956755bd39bc43a041312f607a0c586f64df0a4b9e05e84
GET /style.css HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Cookie: PHPSESSID=jjkksj7eteo2kekkos5v1h3mvk; lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Nov 2023 17:20:22 GMT
Content-Type: text/css
Last-Modified: Thu, 25 Jun 2020 15:35:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"5ef4c445-741"
Strict-Transport-Security: max-age=0
Content-Encoding: gzip
cdn1.cdn-telegram.org/file/BJmPCdKNoInrFi0B38mS2aTDuiMucdjdXqW4JmNP60Gg-NdYKLEdl_GMH7ORi3foI1inTbcsvF4C5sihucwQ9AogFmro0BoGRE-qLYztU91nxUGYxVjlekFBQBXaUm1FtpvzeeFx-VIHZYCstiNUI5WsvN5ort0Ry4SgcWL4g3AkjWOGUgm_-IQ5N9kDy0K73l2rcyF90HQXuEu0yQolR5UxHojfj4EL0AKf9jywnhyplomdy8FzTJNSbphEvfg-HG6m3gR8-b68zcOwcuVNLT6kjgFerADf3-GwYEc3hNKAyHv7jqHmyRyalfQeyJAOwwe3SyNCas4FI5R3nDoLUg.jpg
34.111.15.3200 OK 2.9 kB URL GET HTTP/2 cdn1.cdn-telegram.org/file/BJmPCdKNoInrFi0B38mS2aTDuiMucdjdXqW4JmNP60Gg-NdYKLEdl_GMH7ORi3foI1inTbcsvF4C5sihucwQ9AogFmro0BoGRE-qLYztU91nxUGYxVjlekFBQBXaUm1FtpvzeeFx-VIHZYCstiNUI5WsvN5ort0Ry4SgcWL4g3AkjWOGUgm_-IQ5N9kDy0K73l2rcyF90HQXuEu0yQolR5UxHojfj4EL0AKf9jywnhyplomdy8FzTJNSbphEvfg-HG6m3gR8-b68zcOwcuVNLT6kjgFerADf3-GwYEc3hNKAyHv7jqHmyRyalfQeyJAOwwe3SyNCas4FI5R3nDoLUg.jpg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3\012- data
Hash 866279d2fa9c46896946c9555c34d9f1
14a3d552bafd2746d418eb8e00a267e17a3eadfc
baecc3508c6838397382402292fbe1331e2c405a6f5f71b17d03b1466aa7ce37
GET /file/BJmPCdKNoInrFi0B38mS2aTDuiMucdjdXqW4JmNP60Gg-NdYKLEdl_GMH7ORi3foI1inTbcsvF4C5sihucwQ9AogFmro0BoGRE-qLYztU91nxUGYxVjlekFBQBXaUm1FtpvzeeFx-VIHZYCstiNUI5WsvN5ort0Ry4SgcWL4g3AkjWOGUgm_-IQ5N9kDy0K73l2rcyF90HQXuEu0yQolR5UxHojfj4EL0AKf9jywnhyplomdy8FzTJNSbphEvfg-HG6m3gR8-b68zcOwcuVNLT6kjgFerADf3-GwYEc3hNKAyHv7jqHmyRyalfQeyJAOwwe3SyNCas4FI5R3nDoLUg.jpg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
content-length: 2909
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 15:26:34 GMT
cache-control: public,max-age=7200
etag: "c445c74ea7a32424fcf3e31a0a2606241d94e914"
content-type: image/jpeg
age: 6828
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
xn--r1a.website/favicon.ico
95.216.186.40200 OK 3.6 kB URL GET HTTP/1.1 xn--r1a.website/favicon.ico
IP 95.216.186.40:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectxn--r1a.website
Fingerprint90:19:60:05:73:94:BE:17:50:B3:C1:4D:10:48:13:AA:FB:37:3D:BB
ValidityWed, 18 Oct 2023 08:37:07 GMT - Tue, 16 Jan 2024 08:37:06 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32x32\012- data
Hash f1a3246371aa2d4ffd4f376ae9080b5d
a5b2c928a64ea5240ec2ea18c5ba0b2ffad09910
c61825c6b8465600ac65c2654346e844f871f7a7ceb2ea118a371b06b1db9678
GET /favicon.ico HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Cookie: PHPSESSID=jjkksj7eteo2kekkos5v1h3mvk; lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Nov 2023 17:20:22 GMT
Content-Type: image/x-icon
Content-Length: 3638
Last-Modified: Thu, 25 Jun 2020 15:35:58 GMT
Connection: keep-alive
ETag: "5ef4c45e-e36"
Strict-Transport-Security: max-age=0
Accept-Ranges: bytes
cdn1.cdn-telegram.org/file/LHXmfS7ELFmZnT-nyxz62Gu2QQBX2Ddr5gl6NkxE9sqB0Z5VthFoS7LzRky4kpXh4-RLr1C0K-iHSJv_-L5INRqmAbkuozYvvodHdHfzEya1jGweUxOE2-NddfrCXMZRe0dfMArM5aqRL-LIONQR-Oc1qRATEhBDGqzpgG5psU8FHtfCYy257Sz8NRdWZKiOVg5AujO-uzMB0-MCCt4EyvSf8ZtmDG7Rpn3v1Kg77_HpF834Ss5_HmEYm5NM1yZ1AbIwKWD9a5Q1jgfIYwtDEx_4oupNrzBBqMkgTa1KHBsjPTfdRbx8N--BBL5MEht8W26vCu6ddQw8z2Jkl3c-6Q.jpg
34.111.15.3200 OK 68 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/LHXmfS7ELFmZnT-nyxz62Gu2QQBX2Ddr5gl6NkxE9sqB0Z5VthFoS7LzRky4kpXh4-RLr1C0K-iHSJv_-L5INRqmAbkuozYvvodHdHfzEya1jGweUxOE2-NddfrCXMZRe0dfMArM5aqRL-LIONQR-Oc1qRATEhBDGqzpgG5psU8FHtfCYy257Sz8NRdWZKiOVg5AujO-uzMB0-MCCt4EyvSf8ZtmDG7Rpn3v1Kg77_HpF834Ss5_HmEYm5NM1yZ1AbIwKWD9a5Q1jgfIYwtDEx_4oupNrzBBqMkgTa1KHBsjPTfdRbx8N--BBL5MEht8W26vCu6ddQw8z2Jkl3c-6Q.jpg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash f67e38e1aef92435ffc3d28ab5e37f23
feec621227cd302415463f35011a732341d7ed70
9c8e2788f67e273cb32b7290c1604bfab87c19a365b9200d83701a8eab9ad6cc
GET /file/LHXmfS7ELFmZnT-nyxz62Gu2QQBX2Ddr5gl6NkxE9sqB0Z5VthFoS7LzRky4kpXh4-RLr1C0K-iHSJv_-L5INRqmAbkuozYvvodHdHfzEya1jGweUxOE2-NddfrCXMZRe0dfMArM5aqRL-LIONQR-Oc1qRATEhBDGqzpgG5psU8FHtfCYy257Sz8NRdWZKiOVg5AujO-uzMB0-MCCt4EyvSf8ZtmDG7Rpn3v1Kg77_HpF834Ss5_HmEYm5NM1yZ1AbIwKWD9a5Q1jgfIYwtDEx_4oupNrzBBqMkgTa1KHBsjPTfdRbx8N--BBL5MEht8W26vCu6ddQw8z2Jkl3c-6Q.jpg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
content-length: 67831
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 17:19:09 GMT
cache-control: public,max-age=7200
etag: "2d8d40a68264eb5bd7e9ee6870fd4c67ae91741a"
content-type: image/jpeg
age: 74
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
telegram.org/js/telegram-web.js?14
149.154.167.99200 OK 15 kB URL GET HTTP/2 telegram.org/js/telegram-web.js?14
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash c5020629fcf506aaf4964bd18810cdf3
c5c8736eb68bd907d3d373ab9a55489d6d0de9b9
184303d6102a0f021f32d219c2b7fbd7bd222d97695365cc62133420575d61c7
GET /js/telegram-web.js?14 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: application/javascript
last-modified: Fri, 18 Mar 2022 10:32:52 GMT
etag: W/"62345fd4-2e63"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/font-roboto.css?1
149.154.167.99200 OK 12 kB URL GET HTTP/2 telegram.org/css/font-roboto.css?1
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 521508f111a9593302e466cb80f23ec5
d8876e32471306fc400e3da52ce5b78aa99d6ba6
35f6f76e6cd3730f38c4360afe7d3c7a2b1522bf472ce382a0bf70050b79b782
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/JoYyNr2J1nHjG2Or7uJeT7mwPkYnzUGDtPLDRqQYwAsN4Xyfz54xAUfDAlKsipo4zAnk_RfN6F8gQP6rm2vFpwz1NZscpb3WcT1AVjat6yLxOoFUBMz8DA13_WePM4uIAgyUl6iVbFL-9rwg2GCT8UcPyKQIa8DuHwTwyru-Ejg-uRnwUSzPw70bZuWt4_mOYav410SQCxr0HAfrIdvA3Zl2J1jkQjhVXNpF-OiMykOlmxfFGwdZWzcOdaURNDnwV9N2MLhFjRxo8Z7GBwkCfaPIfwkoheAKrktdkZdFDPI_9TLEvJMvmllWh2Nu3sU3ZJUF2QHIHQEXP8CvezH8mw.jpg
34.111.35.152200 OK 55 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/JoYyNr2J1nHjG2Or7uJeT7mwPkYnzUGDtPLDRqQYwAsN4Xyfz54xAUfDAlKsipo4zAnk_RfN6F8gQP6rm2vFpwz1NZscpb3WcT1AVjat6yLxOoFUBMz8DA13_WePM4uIAgyUl6iVbFL-9rwg2GCT8UcPyKQIa8DuHwTwyru-Ejg-uRnwUSzPw70bZuWt4_mOYav410SQCxr0HAfrIdvA3Zl2J1jkQjhVXNpF-OiMykOlmxfFGwdZWzcOdaURNDnwV9N2MLhFjRxo8Z7GBwkCfaPIfwkoheAKrktdkZdFDPI_9TLEvJMvmllWh2Nu3sU3ZJUF2QHIHQEXP8CvezH8mw.jpg
IP 34.111.35.152:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x380, components 3\012- data
Hash e14eeb03d666fc6a7ee03d4170d69674
696ebe5af2ed2f1fecc2437889db7f4408fe99bb
341eb63b03165209aab5586f9cac2ba1e3dcb2f58ecc85c0fbba286050a03324
GET /file/JoYyNr2J1nHjG2Or7uJeT7mwPkYnzUGDtPLDRqQYwAsN4Xyfz54xAUfDAlKsipo4zAnk_RfN6F8gQP6rm2vFpwz1NZscpb3WcT1AVjat6yLxOoFUBMz8DA13_WePM4uIAgyUl6iVbFL-9rwg2GCT8UcPyKQIa8DuHwTwyru-Ejg-uRnwUSzPw70bZuWt4_mOYav410SQCxr0HAfrIdvA3Zl2J1jkQjhVXNpF-OiMykOlmxfFGwdZWzcOdaURNDnwV9N2MLhFjRxo8Z7GBwkCfaPIfwkoheAKrktdkZdFDPI_9TLEvJMvmllWh2Nu3sU3ZJUF2QHIHQEXP8CvezH8mw.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 54613
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "4a98573148aaf935f6dfedd6850e4b2dedf71274"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/KD_r4aRoqprOUfoxk-_P7UQZIXSRuTCfjbAu1HP3XBH21Me6d-txHXNs4Poy2TX-FwnE8aZ32RB2VcYPr1H5Jf5sfzu78gyqpFayZ-h3y-CZEFI_csFdA-4yABw4xqySPnUh_eqIboGjmywdV2G3DC8ah8UlIQW-hMqvjAncMF5ZoO1QJvi27nU6UKUVQGtCwpVDfvkXxUEl8p267NKpxNmrYOGZAdcOKN0xW1jp-qUe7Ec6jW0Kb9OX465zwTTaCQDUF5l0EbCi2TkoMbxguAGBtgiEgvDBHjyRL_zSEEcIQ7y6ttIW4dol9bwxX4XJCMSbmeSgASJcw_7KS8RZEw.jpg
34.111.35.152200 OK 108 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/KD_r4aRoqprOUfoxk-_P7UQZIXSRuTCfjbAu1HP3XBH21Me6d-txHXNs4Poy2TX-FwnE8aZ32RB2VcYPr1H5Jf5sfzu78gyqpFayZ-h3y-CZEFI_csFdA-4yABw4xqySPnUh_eqIboGjmywdV2G3DC8ah8UlIQW-hMqvjAncMF5ZoO1QJvi27nU6UKUVQGtCwpVDfvkXxUEl8p267NKpxNmrYOGZAdcOKN0xW1jp-qUe7Ec6jW0Kb9OX465zwTTaCQDUF5l0EbCi2TkoMbxguAGBtgiEgvDBHjyRL_zSEEcIQ7y6ttIW4dol9bwxX4XJCMSbmeSgASJcw_7KS8RZEw.jpg
IP 34.111.35.152:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x507, components 3\012- data
Size 108 kB (108038 bytes)
Hash 38e28b05bfbc255a49e9b912d3f92076
d5f26cd187955c6b7e8c7776ec434d4ad411c3c1
8d1f35dd2c27730edd21fd8acceb1a886e4647d4cc5c9db6052d69e6d22dfce5
GET /file/KD_r4aRoqprOUfoxk-_P7UQZIXSRuTCfjbAu1HP3XBH21Me6d-txHXNs4Poy2TX-FwnE8aZ32RB2VcYPr1H5Jf5sfzu78gyqpFayZ-h3y-CZEFI_csFdA-4yABw4xqySPnUh_eqIboGjmywdV2G3DC8ah8UlIQW-hMqvjAncMF5ZoO1QJvi27nU6UKUVQGtCwpVDfvkXxUEl8p267NKpxNmrYOGZAdcOKN0xW1jp-qUe7Ec6jW0Kb9OX465zwTTaCQDUF5l0EbCi2TkoMbxguAGBtgiEgvDBHjyRL_zSEEcIQ7y6ttIW4dol9bwxX4XJCMSbmeSgASJcw_7KS8RZEw.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 108038
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "6f1d5aca5f95471a203f55a124bcd3d762765291"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/e5B7Tz8Qr_cAqGXFeguBrlccJhXB_YMoaJyHEI0vKH3_5W7MszKMoBJLsCjCbf4cscGLb4ZTE4Nv1oxsybwvxcqQHrcmiPo76VX0n36qVaGac37yKjyZECL5WMDqMjiRfBZczFz0_sL8hbBbo08tv09Gv01pudCJZI_tc3d7RqTgNUNJMfQMdZ4WkMpnejFHCnAmHYrnv5at3jvWdcVCC1nPWoO3xXs1nv6vOZmw7y4MQfmzkAsf6_O3jl26ZupIidCUpAr_gNbB4shqD7uXjLS2IU3Qyuu81chADjp0mnqnpwInLq12e_mDnPtv4c-r08Xc8YYvpWJ8E10tT0Ki-A.jpg
34.111.35.152200 OK 130 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/e5B7Tz8Qr_cAqGXFeguBrlccJhXB_YMoaJyHEI0vKH3_5W7MszKMoBJLsCjCbf4cscGLb4ZTE4Nv1oxsybwvxcqQHrcmiPo76VX0n36qVaGac37yKjyZECL5WMDqMjiRfBZczFz0_sL8hbBbo08tv09Gv01pudCJZI_tc3d7RqTgNUNJMfQMdZ4WkMpnejFHCnAmHYrnv5at3jvWdcVCC1nPWoO3xXs1nv6vOZmw7y4MQfmzkAsf6_O3jl26ZupIidCUpAr_gNbB4shqD7uXjLS2IU3Qyuu81chADjp0mnqnpwInLq12e_mDnPtv4c-r08Xc8YYvpWJ8E10tT0Ki-A.jpg
IP 34.111.35.152:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x515, components 3\012- data
Size 130 kB (130422 bytes)
Hash 33864a0d3f413f97f7d6b406b730bc64
41b4553f7038b4f4daf9134db4b9db757e59f51f
72f875fd72333b45c137bfe5aed57c50900f88c96503e635c5ee7124794c6cb0
GET /file/e5B7Tz8Qr_cAqGXFeguBrlccJhXB_YMoaJyHEI0vKH3_5W7MszKMoBJLsCjCbf4cscGLb4ZTE4Nv1oxsybwvxcqQHrcmiPo76VX0n36qVaGac37yKjyZECL5WMDqMjiRfBZczFz0_sL8hbBbo08tv09Gv01pudCJZI_tc3d7RqTgNUNJMfQMdZ4WkMpnejFHCnAmHYrnv5at3jvWdcVCC1nPWoO3xXs1nv6vOZmw7y4MQfmzkAsf6_O3jl26ZupIidCUpAr_gNbB4shqD7uXjLS2IU3Qyuu81chADjp0mnqnpwInLq12e_mDnPtv4c-r08Xc8YYvpWJ8E10tT0Ki-A.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 130422
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "88903fa9e41eb74b196219ce47e505b85ac72b55"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/Qt4yA_QWFuZQayQe2fU1FJrF7f_yRXovKGrTxqkWobfD7OoyEDCI2900w0p3bMXpJnY9elc5BeMNv96tIuCMA1fo9DDtlVyajUFVJnIuK1I9rYIk1OQEzNDDpPZcbinhMBNJBJ0ayyNC9BjqmLgCuAJxAESsZxihWcgBo_5tYGm14ONgUXLv8JkQyRDmvbRF9ySn-mtxVaeInlKPcsXsLKEGv0tYS6VPdhKp-3VKnXBZncCKsovQECWbGI0iahOZZeemM6pygT5Td_pRb3uxVSJjB8aOHlb0RFZrmjq5V9h0SGIicxQzpxQfd3IxHYUokxdI1t4be-X6UniLcimptA.jpg
34.111.35.152200 OK 127 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/Qt4yA_QWFuZQayQe2fU1FJrF7f_yRXovKGrTxqkWobfD7OoyEDCI2900w0p3bMXpJnY9elc5BeMNv96tIuCMA1fo9DDtlVyajUFVJnIuK1I9rYIk1OQEzNDDpPZcbinhMBNJBJ0ayyNC9BjqmLgCuAJxAESsZxihWcgBo_5tYGm14ONgUXLv8JkQyRDmvbRF9ySn-mtxVaeInlKPcsXsLKEGv0tYS6VPdhKp-3VKnXBZncCKsovQECWbGI0iahOZZeemM6pygT5Td_pRb3uxVSJjB8aOHlb0RFZrmjq5V9h0SGIicxQzpxQfd3IxHYUokxdI1t4be-X6UniLcimptA.jpg
IP 34.111.35.152:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x507, components 3\012- data
Size 127 kB (126711 bytes)
Hash 5b1f40b8711a468628d3c4e6d8105d5e
3c0dad9187713546a1cf884f9c0b71fe898e1177
9de06b00a40a8183206ba5d828b0739e98404b01f1922ff69060d94d32ff7d52
GET /file/Qt4yA_QWFuZQayQe2fU1FJrF7f_yRXovKGrTxqkWobfD7OoyEDCI2900w0p3bMXpJnY9elc5BeMNv96tIuCMA1fo9DDtlVyajUFVJnIuK1I9rYIk1OQEzNDDpPZcbinhMBNJBJ0ayyNC9BjqmLgCuAJxAESsZxihWcgBo_5tYGm14ONgUXLv8JkQyRDmvbRF9ySn-mtxVaeInlKPcsXsLKEGv0tYS6VPdhKp-3VKnXBZncCKsovQECWbGI0iahOZZeemM6pygT5Td_pRb3uxVSJjB8aOHlb0RFZrmjq5V9h0SGIicxQzpxQfd3IxHYUokxdI1t4be-X6UniLcimptA.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 126711
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "eed0c6b47aad5d8db90ae3923ee17d8feb94bd21"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/JkVpt0cilG0YojSQa8T3Z3SkPIAPz-w5swQ67fiDUgJlTcOAaA8KVSGw-71_XCwE-puKLjoKh27eOPmozddP64NeJ9COofzT3KxLnk9-ANVlnEW72xUB1kuvZoxd9hxGOphoVSnOuT0eqcYNxMmFAOU1ad00x8ubWQFwYKxvBm_vQW7Te2JRRMJmJJlklvumMSSezvbnE-rL2HGKV6J6moi-NujQqA9EZprOBAXJnmsPeI2R3FEPfrp4ZVWwaTuU6hphdfKslQ4ThcRMc1kjv3TjgnLgQeiJFBW96CzEFkC0iQQ36-G-1NgWFicJO_bWUlGf5I3XVY-_XmaqZeWESA.jpg
34.111.35.152200 OK 127 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/JkVpt0cilG0YojSQa8T3Z3SkPIAPz-w5swQ67fiDUgJlTcOAaA8KVSGw-71_XCwE-puKLjoKh27eOPmozddP64NeJ9COofzT3KxLnk9-ANVlnEW72xUB1kuvZoxd9hxGOphoVSnOuT0eqcYNxMmFAOU1ad00x8ubWQFwYKxvBm_vQW7Te2JRRMJmJJlklvumMSSezvbnE-rL2HGKV6J6moi-NujQqA9EZprOBAXJnmsPeI2R3FEPfrp4ZVWwaTuU6hphdfKslQ4ThcRMc1kjv3TjgnLgQeiJFBW96CzEFkC0iQQ36-G-1NgWFicJO_bWUlGf5I3XVY-_XmaqZeWESA.jpg
IP 34.111.35.152:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x513, components 3\012- data
Size 127 kB (127257 bytes)
Hash b8dc75288a3366d0df331aa4e2239da8
971e3adb73e70e7b314de54f82b62b58c2ae3a18
8f9b5f29cc0ecd7d94a539a9d43eb78417fa5d964302b70821f52a111f6cdcf1
GET /file/JkVpt0cilG0YojSQa8T3Z3SkPIAPz-w5swQ67fiDUgJlTcOAaA8KVSGw-71_XCwE-puKLjoKh27eOPmozddP64NeJ9COofzT3KxLnk9-ANVlnEW72xUB1kuvZoxd9hxGOphoVSnOuT0eqcYNxMmFAOU1ad00x8ubWQFwYKxvBm_vQW7Te2JRRMJmJJlklvumMSSezvbnE-rL2HGKV6J6moi-NujQqA9EZprOBAXJnmsPeI2R3FEPfrp4ZVWwaTuU6hphdfKslQ4ThcRMc1kjv3TjgnLgQeiJFBW96CzEFkC0iQQ36-G-1NgWFicJO_bWUlGf5I3XVY-_XmaqZeWESA.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 127257
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "aad4cbfc412575174588a7599b2a6d970f49c169"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn1.cdn-telegram.org/file/hO3gER3dajrfq3_yuO1TVKQ0XAeyuxFiabbuqkldMl2ggK3aRag41PT0ymff7Jya08FuHkWpc1_fRUz4HW_hwQIEkQjVMvORVwyruNPRdj_ApgYnSyIKuLZM0FUgOnWWUYD1TzySwlqAA34Fg-WIlJsjAne3gZkdgFYjZe5g2FRe1dqbDZ1gdoNmYBphJczfwh8oFlnmq-oeBLB-jfZLHK9-ZhCjTLq-9aSZJfyR8GtPhq4KTJUwQpp5OQvqmVItbnf1c7xE94JHz9KM9wi3G0OPuGTJaxwR1qLgezRSf_YlxAuYP4HUXD65qeocp7UlGG1YRJTbzyWjDRBYtmpnSQ
34.111.15.3200 OK 19 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/hO3gER3dajrfq3_yuO1TVKQ0XAeyuxFiabbuqkldMl2ggK3aRag41PT0ymff7Jya08FuHkWpc1_fRUz4HW_hwQIEkQjVMvORVwyruNPRdj_ApgYnSyIKuLZM0FUgOnWWUYD1TzySwlqAA34Fg-WIlJsjAne3gZkdgFYjZe5g2FRe1dqbDZ1gdoNmYBphJczfwh8oFlnmq-oeBLB-jfZLHK9-ZhCjTLq-9aSZJfyR8GtPhq4KTJUwQpp5OQvqmVItbnf1c7xE94JHz9KM9wi3G0OPuGTJaxwR1qLgezRSf_YlxAuYP4HUXD65qeocp7UlGG1YRJTbzyWjDRBYtmpnSQ
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 836d11ee767b06e027d8acefc3f9c4d8
382bf370a96068074445273d3d13ee4c41a70496
1da86addaaa65ec0baac6d4801c7139a668dbbef9cfe5b163537c2d7034b173d
GET /file/hO3gER3dajrfq3_yuO1TVKQ0XAeyuxFiabbuqkldMl2ggK3aRag41PT0ymff7Jya08FuHkWpc1_fRUz4HW_hwQIEkQjVMvORVwyruNPRdj_ApgYnSyIKuLZM0FUgOnWWUYD1TzySwlqAA34Fg-WIlJsjAne3gZkdgFYjZe5g2FRe1dqbDZ1gdoNmYBphJczfwh8oFlnmq-oeBLB-jfZLHK9-ZhCjTLq-9aSZJfyR8GtPhq4KTJUwQpp5OQvqmVItbnf1c7xE94JHz9KM9wi3G0OPuGTJaxwR1qLgezRSf_YlxAuYP4HUXD65qeocp7UlGG1YRJTbzyWjDRBYtmpnSQ HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: image/jpeg
content-length: 18596
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "f9de32950ebc7a3d6d657981614e0ee0e2c47ed8"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
xn--r1a.website/i/emoji/5204330443725347173.json
95.216.186.40200 OK 2.8 kB URL GET HTTP/1.1 xn--r1a.website/i/emoji/5204330443725347173.json
IP 95.216.186.40:443
ASN #24940 Hetzner Online GmbH
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerLet's Encrypt
Subjectxn--r1a.website
Fingerprint90:19:60:05:73:94:BE:17:50:B3:C1:4D:10:48:13:AA:FB:37:3D:BB
ValidityWed, 18 Oct 2023 08:37:07 GMT - Tue, 16 Jan 2024 08:37:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1493), with CRLF line terminators
Hash 5da77553b5825480f870528ac00d8940
61dda629929c7f541d8ab146a56fc58642d7c895
08c759bb6c952be661f704f1efb789d539e904d67611536cc62f4c2f6d23ec44
GET /i/emoji/5204330443725347173.json HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/s/telegram
Cookie: PHPSESSID=jjkksj7eteo2kekkos5v1h3mvk; lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Nov 2023 17:20:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: lang=en
Strict-Transport-Security: max-age=0
Content-Encoding: gzip
cdn1.cdn-telegram.org/file/sjkhSXEuqHjF_jtuqov8yXsqKeL82LnwEf0IuvlcDd69ys5Brw6OTi1AV6c8Pku5hJ1J_CoOHFA_xYeDlWAfwQbPqf_7i5F4tdtfNabUNquQ2b9tzmMhU3Itq9ob7zZej270QQuQuTG-S8JrSy0PimRCFl6yUVE2tBW2mfJsITWfDDJl1s-ajax2aBCHncgw5gciLLawI-jp_q2rOubaf6HbX1O9Wdlo_X2oV-1eHZrHVa9sNiHLd_g-VxsRSPnXH9VApszkuolfqsfwNeVFzHBAjUmHpFXTjV5m2EoHqnvh-zbz09TGHpuJ5n3Dfda-d68JX8mGZHZS7ilI2lFiUA
34.111.15.3200 OK 18 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/sjkhSXEuqHjF_jtuqov8yXsqKeL82LnwEf0IuvlcDd69ys5Brw6OTi1AV6c8Pku5hJ1J_CoOHFA_xYeDlWAfwQbPqf_7i5F4tdtfNabUNquQ2b9tzmMhU3Itq9ob7zZej270QQuQuTG-S8JrSy0PimRCFl6yUVE2tBW2mfJsITWfDDJl1s-ajax2aBCHncgw5gciLLawI-jp_q2rOubaf6HbX1O9Wdlo_X2oV-1eHZrHVa9sNiHLd_g-VxsRSPnXH9VApszkuolfqsfwNeVFzHBAjUmHpFXTjV5m2EoHqnvh-zbz09TGHpuJ5n3Dfda-d68JX8mGZHZS7ilI2lFiUA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 6b8dd005aa7d282515f5fdc6d15fd347
9268e1882c166bbc165524b3532ef7345b5ad82b
6819a60d64236348aca6a73fe0eb5f040e8b9ff52d94b01597b4d1b249ff1b88
GET /file/sjkhSXEuqHjF_jtuqov8yXsqKeL82LnwEf0IuvlcDd69ys5Brw6OTi1AV6c8Pku5hJ1J_CoOHFA_xYeDlWAfwQbPqf_7i5F4tdtfNabUNquQ2b9tzmMhU3Itq9ob7zZej270QQuQuTG-S8JrSy0PimRCFl6yUVE2tBW2mfJsITWfDDJl1s-ajax2aBCHncgw5gciLLawI-jp_q2rOubaf6HbX1O9Wdlo_X2oV-1eHZrHVa9sNiHLd_g-VxsRSPnXH9VApszkuolfqsfwNeVFzHBAjUmHpFXTjV5m2EoHqnvh-zbz09TGHpuJ5n3Dfda-d68JX8mGZHZS7ilI2lFiUA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 18503
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "6da4c79f353f123e332151d49752adffa1f6147e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/rqF3DX1zXgvOLOPQNi95NUCbgtzhzHUAIifWDCQUPygm91axCeIPxevd_j92vixHbgXxGpA90tz3BtmULv8eQHge0-QUJWAicdtPNHmvzc_vZIMWX3pFi4Zm4-fWyIdwE55sEzEe29PkAXRsOQrohaDzczFFLezgG_EfhZyLYxUVxFnMTllTYE8ZxAhQlwzWtQkK-BTTNpYk32cnfLPyMAh6hc1hiQMFAPhGaZZqoc4Lupx7R-zc0TkqLjxskuMLuyjmWSePfxlS4FN71lEdwdWGBj-KSe3eNmoDdUH34EXKgm8G21zROj7U8WMUOzWeZdMnownsDCIgOCxrnuY7-g
34.111.15.3200 OK 18 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/rqF3DX1zXgvOLOPQNi95NUCbgtzhzHUAIifWDCQUPygm91axCeIPxevd_j92vixHbgXxGpA90tz3BtmULv8eQHge0-QUJWAicdtPNHmvzc_vZIMWX3pFi4Zm4-fWyIdwE55sEzEe29PkAXRsOQrohaDzczFFLezgG_EfhZyLYxUVxFnMTllTYE8ZxAhQlwzWtQkK-BTTNpYk32cnfLPyMAh6hc1hiQMFAPhGaZZqoc4Lupx7R-zc0TkqLjxskuMLuyjmWSePfxlS4FN71lEdwdWGBj-KSe3eNmoDdUH34EXKgm8G21zROj7U8WMUOzWeZdMnownsDCIgOCxrnuY7-g
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 19690aed7cfb1f8789acfe53e95ae299
441a1f26c8fe4112633dceb536e07a2ef7f1c600
a287e59dd0818bfebfbc452eb8e878a8f8d5f1ffd08c64b807f7f45f6dda06a9
GET /file/rqF3DX1zXgvOLOPQNi95NUCbgtzhzHUAIifWDCQUPygm91axCeIPxevd_j92vixHbgXxGpA90tz3BtmULv8eQHge0-QUJWAicdtPNHmvzc_vZIMWX3pFi4Zm4-fWyIdwE55sEzEe29PkAXRsOQrohaDzczFFLezgG_EfhZyLYxUVxFnMTllTYE8ZxAhQlwzWtQkK-BTTNpYk32cnfLPyMAh6hc1hiQMFAPhGaZZqoc4Lupx7R-zc0TkqLjxskuMLuyjmWSePfxlS4FN71lEdwdWGBj-KSe3eNmoDdUH34EXKgm8G21zROj7U8WMUOzWeZdMnownsDCIgOCxrnuY7-g HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 17667
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "3dcb71b3ffb4d42a8e7b9e0e18342b565c9a30f3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/CHi0nPzNIG_CisKb_lfpD5JjXFlln1gi8wN7Y1stCN3ZZFssRraXCj73T9tyKv2huF2zVO9NfrfiuJc6lKxQZfpz4WKYm3Q6t8X2eEBY_qJ-WZGxwXR3OzF36PxG9fa-yXAC30Bd75jaZhzbhIeKII9VEOSjAQ55cpn8PJkN_dkfulfSCGdH5kS1lzIiEL0Wlpc0hNj6s6fLvXzCg9QCU0AsVCR9zMxqm-KkIxmLj1mh6tKsbUFUnAtA_-exhGtPuIFL-z-6GF91OvdQty9OKj8kPYG6gXKeY470xrMkwIvQlYHowH5J4RgeDvoq2V71jy9gHYtu3lU843rMuXNNTg
34.111.15.3200 OK 19 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/CHi0nPzNIG_CisKb_lfpD5JjXFlln1gi8wN7Y1stCN3ZZFssRraXCj73T9tyKv2huF2zVO9NfrfiuJc6lKxQZfpz4WKYm3Q6t8X2eEBY_qJ-WZGxwXR3OzF36PxG9fa-yXAC30Bd75jaZhzbhIeKII9VEOSjAQ55cpn8PJkN_dkfulfSCGdH5kS1lzIiEL0Wlpc0hNj6s6fLvXzCg9QCU0AsVCR9zMxqm-KkIxmLj1mh6tKsbUFUnAtA_-exhGtPuIFL-z-6GF91OvdQty9OKj8kPYG6gXKeY470xrMkwIvQlYHowH5J4RgeDvoq2V71jy9gHYtu3lU843rMuXNNTg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 6b90716e76182f57204b8df169dcc5aa
ed571ee2369c42cdf77971ff815ccac80080d206
652a542b1b1e245be0632ea540efef7e874eadbb392b290bbc5c0e0fbe4608bb
GET /file/CHi0nPzNIG_CisKb_lfpD5JjXFlln1gi8wN7Y1stCN3ZZFssRraXCj73T9tyKv2huF2zVO9NfrfiuJc6lKxQZfpz4WKYm3Q6t8X2eEBY_qJ-WZGxwXR3OzF36PxG9fa-yXAC30Bd75jaZhzbhIeKII9VEOSjAQ55cpn8PJkN_dkfulfSCGdH5kS1lzIiEL0Wlpc0hNj6s6fLvXzCg9QCU0AsVCR9zMxqm-KkIxmLj1mh6tKsbUFUnAtA_-exhGtPuIFL-z-6GF91OvdQty9OKj8kPYG6gXKeY470xrMkwIvQlYHowH5J4RgeDvoq2V71jy9gHYtu3lU843rMuXNNTg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 19164
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "cbb258446739d9fa16bc05a5e2f90c7365628d2e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
xn--r1a.website/v/
95.216.186.40200 OK 24 B IP 95.216.186.40:443
ASN #24940 Hetzner Online GmbH
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerLet's Encrypt
Subjectxn--r1a.website
Fingerprint90:19:60:05:73:94:BE:17:50:B3:C1:4D:10:48:13:AA:FB:37:3D:BB
ValidityWed, 18 Oct 2023 08:37:07 GMT - Tue, 16 Jan 2024 08:37:06 GMT
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
POST /v/ HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 93
Origin: https://xn--r1a.website
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/s/telegram
Cookie: PHPSESSID=jjkksj7eteo2kekkos5v1h3mvk; lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Nov 2023 17:20:23 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: stel_ssid=4474461c53c0254ab2_8099221608259770556; expires=Wed, 08 Nov 2023 17:20:23 GMT; path=/; samesite=None; secure; HttpOnly
Pragma: no-cache
Cache-control: no-store
Strict-Transport-Security: max-age=35768000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn1.cdn-telegram.org/file/iXGvtARbdHi9JXQZQW_03LpSoZbvGLQ5PSF0Vq8T-2qlK_ALZDSDXLUYm1lsp6TFR3VdtEnywZ_6QeZh9_tCkZ44dOxk3qm0R6Afhfxv-d2VeWA0HwH21e-yhHDlO0WD8rUMqZvftOfj0zbxLcOpzxY2J3Nqhtqviyx4ysnTreCdNST9aMXBo-tJRpzMS57nJlHjs6AHtU_aQCFID9rMefJH2N8p9MfACp7xNK1zMhE5jxOvcKL8T3TQrBBjfUKSvQRdbu34-XtDOFNzSpTIHPdwwEP0CUTDQ69K_SvqfXahkmIteOi76MX0-R-J63I9679grRMQoTbce2icQ6K0GQ
34.111.15.3200 OK 20 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/iXGvtARbdHi9JXQZQW_03LpSoZbvGLQ5PSF0Vq8T-2qlK_ALZDSDXLUYm1lsp6TFR3VdtEnywZ_6QeZh9_tCkZ44dOxk3qm0R6Afhfxv-d2VeWA0HwH21e-yhHDlO0WD8rUMqZvftOfj0zbxLcOpzxY2J3Nqhtqviyx4ysnTreCdNST9aMXBo-tJRpzMS57nJlHjs6AHtU_aQCFID9rMefJH2N8p9MfACp7xNK1zMhE5jxOvcKL8T3TQrBBjfUKSvQRdbu34-XtDOFNzSpTIHPdwwEP0CUTDQ69K_SvqfXahkmIteOi76MX0-R-J63I9679grRMQoTbce2icQ6K0GQ
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash c9f38783928d3cb5b9652bfbc5d54ef4
7e4ca2fdbda1a347cb707603c84c19a07680429c
580018d6394b825a4502e86d3bb165aca29241dc5f6ed67e287977e6e6475087
GET /file/iXGvtARbdHi9JXQZQW_03LpSoZbvGLQ5PSF0Vq8T-2qlK_ALZDSDXLUYm1lsp6TFR3VdtEnywZ_6QeZh9_tCkZ44dOxk3qm0R6Afhfxv-d2VeWA0HwH21e-yhHDlO0WD8rUMqZvftOfj0zbxLcOpzxY2J3Nqhtqviyx4ysnTreCdNST9aMXBo-tJRpzMS57nJlHjs6AHtU_aQCFID9rMefJH2N8p9MfACp7xNK1zMhE5jxOvcKL8T3TQrBBjfUKSvQRdbu34-XtDOFNzSpTIHPdwwEP0CUTDQ69K_SvqfXahkmIteOi76MX0-R-J63I9679grRMQoTbce2icQ6K0GQ HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 20018
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "68a620bf45a245cdf7634ce0dbb8b5f01fb59394"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/ajq_SXQ_4lFeyHwBtCYbg80DPOj2fpSht_ur7WpFPVUWvEZluDRwMgiW1neOEhwQoXK_GYvAA0GoccCOHfcCOtr9wBw0eFMu1tCoSfI4dc-5Qa5ggC_P9urwAgLYwq9zZNsMx4YDdJVIq6sbBPF26uWGYNUlQaguE-avOtPoYXUtz0XjUfYdW4g_laq2UGnCX4fW5pOAZVFoVFXMlFdAhYzmtSD9fqADoHVhACmcq-Cbsdzqd9PVAK_No_weqmhzXMQ2iwbcS2jdRi19a8ERwS7BGgrYWKs0BIPirQD3w49EglVcSjh3AZL3jwcQa16BuOBpLOQ8O3xonBjFmV7pSA
34.111.15.3200 OK 17 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/ajq_SXQ_4lFeyHwBtCYbg80DPOj2fpSht_ur7WpFPVUWvEZluDRwMgiW1neOEhwQoXK_GYvAA0GoccCOHfcCOtr9wBw0eFMu1tCoSfI4dc-5Qa5ggC_P9urwAgLYwq9zZNsMx4YDdJVIq6sbBPF26uWGYNUlQaguE-avOtPoYXUtz0XjUfYdW4g_laq2UGnCX4fW5pOAZVFoVFXMlFdAhYzmtSD9fqADoHVhACmcq-Cbsdzqd9PVAK_No_weqmhzXMQ2iwbcS2jdRi19a8ERwS7BGgrYWKs0BIPirQD3w49EglVcSjh3AZL3jwcQa16BuOBpLOQ8O3xonBjFmV7pSA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 75d9f6455dd1a281687a1a7ea3bd2ac9
f91c7612b7c33a5d6f94f5483317bfa8fe6d792e
14ed685a46e3779a476bd23a95d5e29aa6c3ec1c5a9102e11ca74e9acdb7c718
GET /file/ajq_SXQ_4lFeyHwBtCYbg80DPOj2fpSht_ur7WpFPVUWvEZluDRwMgiW1neOEhwQoXK_GYvAA0GoccCOHfcCOtr9wBw0eFMu1tCoSfI4dc-5Qa5ggC_P9urwAgLYwq9zZNsMx4YDdJVIq6sbBPF26uWGYNUlQaguE-avOtPoYXUtz0XjUfYdW4g_laq2UGnCX4fW5pOAZVFoVFXMlFdAhYzmtSD9fqADoHVhACmcq-Cbsdzqd9PVAK_No_weqmhzXMQ2iwbcS2jdRi19a8ERwS7BGgrYWKs0BIPirQD3w49EglVcSjh3AZL3jwcQa16BuOBpLOQ8O3xonBjFmV7pSA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 17398
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "c5915316abbe34823affdc711d6f12a74598cad0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/lvmzjhO557p3O3tW6TGzefES_l23R1hzMLzM2vMe6Frp6GAeLfaZ60ysHEb2l2aZBN9e3R_uHvLAbiseKm_4KN8Zm4OfifIcqvggGHBIbo9CO2N56X5XmWDksSfz0fUEBM-p8qSteu98aLdXfTRdP1IJLmuHIuyX3aU3Q_aD4FliX-2MNtyqf7U7UZU3MJXepjTke6X72MophVM8BN3lyyllKuwKpyq1erC3-UVc3SGEECpABcAiqumP1y_TLl5Hk4pQNaK2p56kkYyvw850OXjlRwnKgsnKE3SfMetOFKc39BD7RN4UFAF9k8kl5zs_xca_SUFgMMm3O5zMhcWUyg
34.111.15.3200 OK 13 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/lvmzjhO557p3O3tW6TGzefES_l23R1hzMLzM2vMe6Frp6GAeLfaZ60ysHEb2l2aZBN9e3R_uHvLAbiseKm_4KN8Zm4OfifIcqvggGHBIbo9CO2N56X5XmWDksSfz0fUEBM-p8qSteu98aLdXfTRdP1IJLmuHIuyX3aU3Q_aD4FliX-2MNtyqf7U7UZU3MJXepjTke6X72MophVM8BN3lyyllKuwKpyq1erC3-UVc3SGEECpABcAiqumP1y_TLl5Hk4pQNaK2p56kkYyvw850OXjlRwnKgsnKE3SfMetOFKc39BD7RN4UFAF9k8kl5zs_xca_SUFgMMm3O5zMhcWUyg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x213, components 3\012- data
Hash 3e2aa4747f9cdf4654cb249becda9245
6a2a86782cf67e777d2ecd436fe3cc3f11be4577
8ff2692d64ad244a382049f064509cb0c3beaf6c6ffc9dd616ecd9b5a2a556f3
GET /file/lvmzjhO557p3O3tW6TGzefES_l23R1hzMLzM2vMe6Frp6GAeLfaZ60ysHEb2l2aZBN9e3R_uHvLAbiseKm_4KN8Zm4OfifIcqvggGHBIbo9CO2N56X5XmWDksSfz0fUEBM-p8qSteu98aLdXfTRdP1IJLmuHIuyX3aU3Q_aD4FliX-2MNtyqf7U7UZU3MJXepjTke6X72MophVM8BN3lyyllKuwKpyq1erC3-UVc3SGEECpABcAiqumP1y_TLl5Hk4pQNaK2p56kkYyvw850OXjlRwnKgsnKE3SfMetOFKc39BD7RN4UFAF9k8kl5zs_xca_SUFgMMm3O5zMhcWUyg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 12604
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "39b2badb8565a96531805cebd014725655e7e2a3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/i_J-FDwnpH-bHwY_pJvee0cpYHRnCm7eKUfuNBL2baidsOR4Env3HpOKmbizMGCKhvEBLvV5SN46uzBLPM6a1WzXG9oQKizhnhmpb2lhGj27UR2_JceJPeFPv6zFJ680VkY62RGJ4_FsEpKATvwapddPp4868-29y6m6UI0kMVowOgMlWz9gdrFIDL2VC1FhJKNXSADvtU8VSn74bXTM5bibjIGkcOJGoAtJZbCJYarVu8TZppPBitLTTczN5gtd6vvcHKew3jQYrufGwnvOFEWWobrGrEBHWaOyPgtsN2NZcjeX-qIfPY73-Q-DjjikVA8bSluCmupGPhieN2z66A
34.111.15.3200 OK 19 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/i_J-FDwnpH-bHwY_pJvee0cpYHRnCm7eKUfuNBL2baidsOR4Env3HpOKmbizMGCKhvEBLvV5SN46uzBLPM6a1WzXG9oQKizhnhmpb2lhGj27UR2_JceJPeFPv6zFJ680VkY62RGJ4_FsEpKATvwapddPp4868-29y6m6UI0kMVowOgMlWz9gdrFIDL2VC1FhJKNXSADvtU8VSn74bXTM5bibjIGkcOJGoAtJZbCJYarVu8TZppPBitLTTczN5gtd6vvcHKew3jQYrufGwnvOFEWWobrGrEBHWaOyPgtsN2NZcjeX-qIfPY73-Q-DjjikVA8bSluCmupGPhieN2z66A
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash fb508ea031e56fffb57b79e1e44a84bc
dbaa7ac90382197de6874396e22eadfc8400877b
c043ecfabffb76fbacf499d11285dbe644dcd9dc4a7ac1f7d7361728fbd6f3e5
GET /file/i_J-FDwnpH-bHwY_pJvee0cpYHRnCm7eKUfuNBL2baidsOR4Env3HpOKmbizMGCKhvEBLvV5SN46uzBLPM6a1WzXG9oQKizhnhmpb2lhGj27UR2_JceJPeFPv6zFJ680VkY62RGJ4_FsEpKATvwapddPp4868-29y6m6UI0kMVowOgMlWz9gdrFIDL2VC1FhJKNXSADvtU8VSn74bXTM5bibjIGkcOJGoAtJZbCJYarVu8TZppPBitLTTczN5gtd6vvcHKew3jQYrufGwnvOFEWWobrGrEBHWaOyPgtsN2NZcjeX-qIfPY73-Q-DjjikVA8bSluCmupGPhieN2z66A HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 18713
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "e9bd56f5fb065b634358257f9b8013b2f7509dbf"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/QKWd9ZNNk4C6ULXB7wfUrXQ--1s9g94Ml8R8YyYcQlpAr_ArdBLrL-ABSW4Jtj6SLv_N2TtHYIqGWH8eJ3GG8Fy8Olzh5Xsg2vtOOyQtdyYvSHv5PCuRyo8DNMYxu_jenWNVmLHL--q4FcKDWjKgIdF63aUbPu8ZWIx78Y57Eh5jyhZbRGZEYXBGA0sWcfWjK1xc-qDEEqGETwpsWhRyTR8Qz-Nt158xhi1SNFm15dSKRluOWyQc69Ou7A2HmM7xyq157wXKqGSaPodTf6hpGGrMUQdTRsKt3pLuD65tlw5wxf5DChyVhacDaZlY4gPPSutCQdmmZPZo39GtIgAprw
34.111.15.3200 OK 15 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/QKWd9ZNNk4C6ULXB7wfUrXQ--1s9g94Ml8R8YyYcQlpAr_ArdBLrL-ABSW4Jtj6SLv_N2TtHYIqGWH8eJ3GG8Fy8Olzh5Xsg2vtOOyQtdyYvSHv5PCuRyo8DNMYxu_jenWNVmLHL--q4FcKDWjKgIdF63aUbPu8ZWIx78Y57Eh5jyhZbRGZEYXBGA0sWcfWjK1xc-qDEEqGETwpsWhRyTR8Qz-Nt158xhi1SNFm15dSKRluOWyQc69Ou7A2HmM7xyq157wXKqGSaPodTf6hpGGrMUQdTRsKt3pLuD65tlw5wxf5DChyVhacDaZlY4gPPSutCQdmmZPZo39GtIgAprw
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x320, components 3\012- data
Hash 5b97f55f59f85885f5c12316a5958760
7ecf54f61c867ccdb50586b84055f8d6e35db68b
572b7430baa972ba9711a99afe77792beb8fdc59b60cc800340a3e1f1f4527af
GET /file/QKWd9ZNNk4C6ULXB7wfUrXQ--1s9g94Ml8R8YyYcQlpAr_ArdBLrL-ABSW4Jtj6SLv_N2TtHYIqGWH8eJ3GG8Fy8Olzh5Xsg2vtOOyQtdyYvSHv5PCuRyo8DNMYxu_jenWNVmLHL--q4FcKDWjKgIdF63aUbPu8ZWIx78Y57Eh5jyhZbRGZEYXBGA0sWcfWjK1xc-qDEEqGETwpsWhRyTR8Qz-Nt158xhi1SNFm15dSKRluOWyQc69Ou7A2HmM7xyq157wXKqGSaPodTf6hpGGrMUQdTRsKt3pLuD65tlw5wxf5DChyVhacDaZlY4gPPSutCQdmmZPZo39GtIgAprw HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 15324
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "23f6ff3af33e6dfd420b50a519a1c41767171c72"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/dqQZh2T1LTsV_zwj5aupOETEZqNLmzZ0WkfRSO22m9p02nZOdqm55g-J3XM8aObdMvDhFuLuJkakpxk1y1QUTVBLD3aEPWJxl25QayvYPwyMLVMq_LVo7O0payrxltpSyvgTNTQ3assKI5pbey35bcF_S9uxMOIobbsZhZxwdq2nZ00czDxyVzqjdiJFieQB_vswzJ1mRsNUmYf_aF2UHCRrNpP4XW19PwfKiiJlUW9w2Zzo00lFr4OWepYwWiMtdCPnBikeVrD9zH0UPXEB1l9gTICwDu12wVMoq9Ym2dUEkxYnqSH37_HnZcxCRtLZGZPa7Fl-TAW_1ZlIWOLucw
34.111.15.3200 OK 17 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/dqQZh2T1LTsV_zwj5aupOETEZqNLmzZ0WkfRSO22m9p02nZOdqm55g-J3XM8aObdMvDhFuLuJkakpxk1y1QUTVBLD3aEPWJxl25QayvYPwyMLVMq_LVo7O0payrxltpSyvgTNTQ3assKI5pbey35bcF_S9uxMOIobbsZhZxwdq2nZ00czDxyVzqjdiJFieQB_vswzJ1mRsNUmYf_aF2UHCRrNpP4XW19PwfKiiJlUW9w2Zzo00lFr4OWepYwWiMtdCPnBikeVrD9zH0UPXEB1l9gTICwDu12wVMoq9Ym2dUEkxYnqSH37_HnZcxCRtLZGZPa7Fl-TAW_1ZlIWOLucw
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash b845a593f239681ad686434e744a74ed
f30f34ecc4c07b347eb0211f0cf0ffa4fbaa9cbb
c73c49f8cd0184e4d8535875b6b3e194f12dbc0e863fd7d1f288b39455014bd6
GET /file/dqQZh2T1LTsV_zwj5aupOETEZqNLmzZ0WkfRSO22m9p02nZOdqm55g-J3XM8aObdMvDhFuLuJkakpxk1y1QUTVBLD3aEPWJxl25QayvYPwyMLVMq_LVo7O0payrxltpSyvgTNTQ3assKI5pbey35bcF_S9uxMOIobbsZhZxwdq2nZ00czDxyVzqjdiJFieQB_vswzJ1mRsNUmYf_aF2UHCRrNpP4XW19PwfKiiJlUW9w2Zzo00lFr4OWepYwWiMtdCPnBikeVrD9zH0UPXEB1l9gTICwDu12wVMoq9Ym2dUEkxYnqSH37_HnZcxCRtLZGZPa7Fl-TAW_1ZlIWOLucw HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 17344
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "acfc6f0d88a56156620997a3721524761dc449e5"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
telegram.org/js/widget-frame.js?62
149.154.167.99200 OK 38 kB URL GET HTTP/2 telegram.org/js/widget-frame.js?62
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash bb8b258da3eff4c198bdc2049afa69b9
5a3679e1fb591308fd436478da8e0089bbed3ab2
0ee36f1f6dd7ed16213586288d751311d5d7245fc5e84c66bbbf0d71bc7eed86
GET /js/widget-frame.js?62 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: application/javascript
last-modified: Thu, 20 Apr 2023 18:46:51 GMT
etag: W/"6441889b-16f16"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn1.cdn-telegram.org/file/ulyomKYDFgrKs-BHe-Tbp__obPBzr-Elg1gDuvxxCF804JlqZlMxYYlVuHj6i5L94IHq5pl-LuDAYyQ24rYEnsw63dBqc9ZEA0HH8TKI8uyZg9WSOF-v5drh1S3BfcmAHNBAhD6ZSaIZw4GmdMT_c9_57IZqjb7lF5GzSUAB-12ykYA_TA5RyXtuy7aMBZ-x1IuoOuJkKEec1XxoTK5JcrBe1vdgxRz-iAqg0ENv1RPymaeynRuMBgjzGLEXaInK_T1YjIB63yMmDilZK_F2ZTw_pGas5cuJisX9PWbZOyE6In81mZQ0cgr_y2Nsv8T9wHDGMYhM-awoSLAkdmo2qg
34.111.15.3200 OK 16 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/ulyomKYDFgrKs-BHe-Tbp__obPBzr-Elg1gDuvxxCF804JlqZlMxYYlVuHj6i5L94IHq5pl-LuDAYyQ24rYEnsw63dBqc9ZEA0HH8TKI8uyZg9WSOF-v5drh1S3BfcmAHNBAhD6ZSaIZw4GmdMT_c9_57IZqjb7lF5GzSUAB-12ykYA_TA5RyXtuy7aMBZ-x1IuoOuJkKEec1XxoTK5JcrBe1vdgxRz-iAqg0ENv1RPymaeynRuMBgjzGLEXaInK_T1YjIB63yMmDilZK_F2ZTw_pGas5cuJisX9PWbZOyE6In81mZQ0cgr_y2Nsv8T9wHDGMYhM-awoSLAkdmo2qg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x320, components 3\012- data
Hash 8186f620687e901fbf8b1e76980be398
fce0b2fcce6c6a3b65414a0becbf8b13900defe0
dec9b49d97e154271c44de2e69a182d1e619e36d145c7390f29fa8126108ef1f
GET /file/ulyomKYDFgrKs-BHe-Tbp__obPBzr-Elg1gDuvxxCF804JlqZlMxYYlVuHj6i5L94IHq5pl-LuDAYyQ24rYEnsw63dBqc9ZEA0HH8TKI8uyZg9WSOF-v5drh1S3BfcmAHNBAhD6ZSaIZw4GmdMT_c9_57IZqjb7lF5GzSUAB-12ykYA_TA5RyXtuy7aMBZ-x1IuoOuJkKEec1XxoTK5JcrBe1vdgxRz-iAqg0ENv1RPymaeynRuMBgjzGLEXaInK_T1YjIB63yMmDilZK_F2ZTw_pGas5cuJisX9PWbZOyE6In81mZQ0cgr_y2Nsv8T9wHDGMYhM-awoSLAkdmo2qg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 15517
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "7d29ab55104f1ed822c5d7a9a65214f320a1078c"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/Z77GbP1mso9e3jgFBH-daPyVpZiv6HvZmcC21ZxZZ7huD9WO1yWV_Th46vrtVia2Rw_KGvUAqst40W3Qs-q9RRA3F3ajlvWzWfXuLhhh3GUzYBx0mhjA4HBbPW09y6v5FrSIW9LhbbTGWrZ8-GzCmF0QK-85GdgZ_LkAKJw_aJwu0eDGrbBe4WTz05IA2wucvYQlUnAwSI6PnzcCIsJn6ZUJqbK1GhErRLDNLuspZxtEvbgaV_-uWT-Lgh92I-i9A0SzCIHW74KiPWRIUxu8dKy8taU9-9aPiUzByb-iQzE_9Y3Es3qCCdKrE86anX009UsapN9gJbAiyRd7325gGQ
34.111.15.3200 OK 15 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/Z77GbP1mso9e3jgFBH-daPyVpZiv6HvZmcC21ZxZZ7huD9WO1yWV_Th46vrtVia2Rw_KGvUAqst40W3Qs-q9RRA3F3ajlvWzWfXuLhhh3GUzYBx0mhjA4HBbPW09y6v5FrSIW9LhbbTGWrZ8-GzCmF0QK-85GdgZ_LkAKJw_aJwu0eDGrbBe4WTz05IA2wucvYQlUnAwSI6PnzcCIsJn6ZUJqbK1GhErRLDNLuspZxtEvbgaV_-uWT-Lgh92I-i9A0SzCIHW74KiPWRIUxu8dKy8taU9-9aPiUzByb-iQzE_9Y3Es3qCCdKrE86anX009UsapN9gJbAiyRd7325gGQ
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x320, components 3\012- data
Hash 6670d2160b115929ee0354d6d54f68c8
9466bcb57c1c27e1034ae173fd58d0feb4ce2d68
5a2826783cf252699b7f00a84ef11659c089db007c0698d12ba8cc57570a3293
GET /file/Z77GbP1mso9e3jgFBH-daPyVpZiv6HvZmcC21ZxZZ7huD9WO1yWV_Th46vrtVia2Rw_KGvUAqst40W3Qs-q9RRA3F3ajlvWzWfXuLhhh3GUzYBx0mhjA4HBbPW09y6v5FrSIW9LhbbTGWrZ8-GzCmF0QK-85GdgZ_LkAKJw_aJwu0eDGrbBe4WTz05IA2wucvYQlUnAwSI6PnzcCIsJn6ZUJqbK1GhErRLDNLuspZxtEvbgaV_-uWT-Lgh92I-i9A0SzCIHW74KiPWRIUxu8dKy8taU9-9aPiUzByb-iQzE_9Y3Es3qCCdKrE86anX009UsapN9gJbAiyRd7325gGQ HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 15242
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "1e9b83c48aaa98d18a3d9b721fb7f4f7fb9a9eb3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/fJYsnK4Gjbgw5VLRB0w21nBQvY-vDrm1bZkPkFWlxxeEoAnyXIlUUzjraxHXWVap2TQ17CRCzt4xijyt5j6HBWx28zBbEQS6EvarLTjVMNkaC2UFM9pAk9UwK2iqCuppR0S-UKs0U8dIFFtPNAmGsDukZPKfxnxq2Q3iEtXO9mdjOV0Uk7SAWn6JuBH9nVuG7bIkCo1ujYWakf1u6GH7uyTMQP9VdSQ-bt8qvTjg6q-qz0AuOegZW2PO0BFpZDV3Ki74gzCVB9FHBrT-qP2idoEQdWdzrD51arPCt1Wuy8YYr2MBt-ioH7yTkjLqcpp_7Yxi6NKgLg58PkVAiWdOkw
34.111.15.3200 OK 10 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/fJYsnK4Gjbgw5VLRB0w21nBQvY-vDrm1bZkPkFWlxxeEoAnyXIlUUzjraxHXWVap2TQ17CRCzt4xijyt5j6HBWx28zBbEQS6EvarLTjVMNkaC2UFM9pAk9UwK2iqCuppR0S-UKs0U8dIFFtPNAmGsDukZPKfxnxq2Q3iEtXO9mdjOV0Uk7SAWn6JuBH9nVuG7bIkCo1ujYWakf1u6GH7uyTMQP9VdSQ-bt8qvTjg6q-qz0AuOegZW2PO0BFpZDV3Ki74gzCVB9FHBrT-qP2idoEQdWdzrD51arPCt1Wuy8YYr2MBt-ioH7yTkjLqcpp_7Yxi6NKgLg58PkVAiWdOkw
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x320, components 3\012- data
Hash 71fbfb6ded6eacebad1b13abd9552430
a44ba12314fcce534e44139811a40bfe8e645690
7b1ba6e67e27cfb6caaeab89a20f656ffa837d4657f609ef99d3402d2f6b7263
GET /file/fJYsnK4Gjbgw5VLRB0w21nBQvY-vDrm1bZkPkFWlxxeEoAnyXIlUUzjraxHXWVap2TQ17CRCzt4xijyt5j6HBWx28zBbEQS6EvarLTjVMNkaC2UFM9pAk9UwK2iqCuppR0S-UKs0U8dIFFtPNAmGsDukZPKfxnxq2Q3iEtXO9mdjOV0Uk7SAWn6JuBH9nVuG7bIkCo1ujYWakf1u6GH7uyTMQP9VdSQ-bt8qvTjg6q-qz0AuOegZW2PO0BFpZDV3Ki74gzCVB9FHBrT-qP2idoEQdWdzrD51arPCt1Wuy8YYr2MBt-ioH7yTkjLqcpp_7Yxi6NKgLg58PkVAiWdOkw HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 10457
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "46d6906906210c93f99ab22141335acc663bf5de"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/5f1ef17b6c.mp4?token=hLlU7v-OJL5Bsj_9AbW0ClaK6zFEJalKBlwPwGDlQeKcUn_7uWADanj7qsFhnR_DrGpyBr60yzvpI9yRDOSjxKY89Zq7BPXwGdfjMJt9PfAJO1AYs3EoJ_IqKoevu6sSHrwCKu4cWer_wZRD8mnYRlP2lj4KS7cd5V5Uk0Xd3uPjzLLLya5rWEgaWhWo71IwfWscu_TNGLJCa0WB6dRAVkQ7hMNOZkQMZIwLKvvYCxjMyRVRMP9qvgsoE4wUnLxixd3v8y_m1P41wl925TC3yayT4p9ChZkdSvvFcg5lSHPGiqs4PhuwDdyWcAPys1-OcKZGBgeiTj7zDnVteoU8bA
34.111.15.3206 Partial Content 1.7 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/5f1ef17b6c.mp4?token=hLlU7v-OJL5Bsj_9AbW0ClaK6zFEJalKBlwPwGDlQeKcUn_7uWADanj7qsFhnR_DrGpyBr60yzvpI9yRDOSjxKY89Zq7BPXwGdfjMJt9PfAJO1AYs3EoJ_IqKoevu6sSHrwCKu4cWer_wZRD8mnYRlP2lj4KS7cd5V5Uk0Xd3uPjzLLLya5rWEgaWhWo71IwfWscu_TNGLJCa0WB6dRAVkQ7hMNOZkQMZIwLKvvYCxjMyRVRMP9qvgsoE4wUnLxixd3v8y_m1P41wl925TC3yayT4p9ChZkdSvvFcg5lSHPGiqs4PhuwDdyWcAPys1-OcKZGBgeiTj7zDnVteoU8bA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 1.7 MB (1654531 bytes)
Hash cd24649a8f79afb8db9d43005fb171f4
1d5cefeab8f230798e44e6fc12185d39ecd6f63e
2b9a9e92c6230c98a08c46ac2e8c74195580b1a4d5ced5c638deac7ef02fdebc
GET /file/5f1ef17b6c.mp4?token=hLlU7v-OJL5Bsj_9AbW0ClaK6zFEJalKBlwPwGDlQeKcUn_7uWADanj7qsFhnR_DrGpyBr60yzvpI9yRDOSjxKY89Zq7BPXwGdfjMJt9PfAJO1AYs3EoJ_IqKoevu6sSHrwCKu4cWer_wZRD8mnYRlP2lj4KS7cd5V5Uk0Xd3uPjzLLLya5rWEgaWhWo71IwfWscu_TNGLJCa0WB6dRAVkQ7hMNOZkQMZIwLKvvYCxjMyRVRMP9qvgsoE4wUnLxixd3v8y_m1P41wl925TC3yayT4p9ChZkdSvvFcg5lSHPGiqs4PhuwDdyWcAPys1-OcKZGBgeiTj7zDnVteoU8bA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 1654531
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "9b5a55cf7ed1d160e851beba87c3f947a2ccc6f6"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-1654530/1654531
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/af12613e0d.mp4?token=i-jUM7DVDqHxv4nf_H57YZOspsichRwiUDTt9SD92JMnhbdNSGzl4DQ-yQQgEkR8lrs9gsgMdg73VpMhELNSU1ROfJPW40jTnVp_1mh4btwuJO3z8KL0bElU6GoeJ0YV9X6IDynAphnL2zMmPOXNnln4qdg8Searphu41YiTDGI5zklvnQ5f9V3wae4_5s-SAOwqXyA-yF8AIE5jArOH7sBotmf_8l1PTZeGmAauPiNXaslNq0A6MRPDijp4JIUcYzQTnfcDYp9GeefEkw1XV6uSkpa1NueUro0lI_sgnHcqGTGPrp_Nrk-YT5rhCqXDqsDycUruliZy6q-U2wUueA
34.111.15.3206 Partial Content 28 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/af12613e0d.mp4?token=i-jUM7DVDqHxv4nf_H57YZOspsichRwiUDTt9SD92JMnhbdNSGzl4DQ-yQQgEkR8lrs9gsgMdg73VpMhELNSU1ROfJPW40jTnVp_1mh4btwuJO3z8KL0bElU6GoeJ0YV9X6IDynAphnL2zMmPOXNnln4qdg8Searphu41YiTDGI5zklvnQ5f9V3wae4_5s-SAOwqXyA-yF8AIE5jArOH7sBotmf_8l1PTZeGmAauPiNXaslNq0A6MRPDijp4JIUcYzQTnfcDYp9GeefEkw1XV6uSkpa1NueUro0lI_sgnHcqGTGPrp_Nrk-YT5rhCqXDqsDycUruliZy6q-U2wUueA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
Hash 4664ee476820a1ccce67f94dc1e736b1
7739743bb6cde0e0ea9495576e5380c65049ac08
b8ecfec482dd0846a07aa0423c48e82f4348f8c1b0853d1c4f9ec9053a9b632f
GET /file/af12613e0d.mp4?token=i-jUM7DVDqHxv4nf_H57YZOspsichRwiUDTt9SD92JMnhbdNSGzl4DQ-yQQgEkR8lrs9gsgMdg73VpMhELNSU1ROfJPW40jTnVp_1mh4btwuJO3z8KL0bElU6GoeJ0YV9X6IDynAphnL2zMmPOXNnln4qdg8Searphu41YiTDGI5zklvnQ5f9V3wae4_5s-SAOwqXyA-yF8AIE5jArOH7sBotmf_8l1PTZeGmAauPiNXaslNq0A6MRPDijp4JIUcYzQTnfcDYp9GeefEkw1XV6uSkpa1NueUro0lI_sgnHcqGTGPrp_Nrk-YT5rhCqXDqsDycUruliZy6q-U2wUueA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=4587520-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 17:20:23 GMT
cache-control: public,max-age=7200
etag: "242f642f3d131a4789207b829e8c7899a3e3fa9e"
content-type: video/mp4
content-range: bytes 4587520-4615440/4615441
content-length: 27921
age: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/e6303f8fd9.mp4?token=uiq5E2yI0orX8NSMJqoK5YUckbcren-MD3BvOSBC9A_zM2UHW3QwCH84oVoDFiF3C135bdg4MWpEAHHeYqf3ts1NTzGb2iAlKJX5_QpzT3jlmOkXLsc7nIttlANhJgqZW4n3WPTrxFsTQo6moUa1ceqqg6_FcWf7-nvoos6YYhjXYVbAQ8jTTgmzG4Hx0GRcIausTW2__qKPBCmADXQ7NsJP2n7GVmteV1AaSMXjbJvwDx0FXXgRfNeUyWnFUelyGF_qD2hKJDk4jVSWHaYDvq4YE1wnjC9vcmIdRmdhPhfRz-e_L54ETUY2EPzM4c-85LcFBptftBGmVPECgk2czQ
34.111.15.3206 Partial Content 3.5 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/e6303f8fd9.mp4?token=uiq5E2yI0orX8NSMJqoK5YUckbcren-MD3BvOSBC9A_zM2UHW3QwCH84oVoDFiF3C135bdg4MWpEAHHeYqf3ts1NTzGb2iAlKJX5_QpzT3jlmOkXLsc7nIttlANhJgqZW4n3WPTrxFsTQo6moUa1ceqqg6_FcWf7-nvoos6YYhjXYVbAQ8jTTgmzG4Hx0GRcIausTW2__qKPBCmADXQ7NsJP2n7GVmteV1AaSMXjbJvwDx0FXXgRfNeUyWnFUelyGF_qD2hKJDk4jVSWHaYDvq4YE1wnjC9vcmIdRmdhPhfRz-e_L54ETUY2EPzM4c-85LcFBptftBGmVPECgk2czQ
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 3.5 MB (3461658 bytes)
Hash 1358c5c4336b60c44117f3ea96b0bc6d
d153ecfea085c19cc0bf78ec380fbf650ffbcbe3
24890a5d2eddcd21845b65ab8700e8a7c5f71e964e49de8afd0503122fc4cd22
GET /file/e6303f8fd9.mp4?token=uiq5E2yI0orX8NSMJqoK5YUckbcren-MD3BvOSBC9A_zM2UHW3QwCH84oVoDFiF3C135bdg4MWpEAHHeYqf3ts1NTzGb2iAlKJX5_QpzT3jlmOkXLsc7nIttlANhJgqZW4n3WPTrxFsTQo6moUa1ceqqg6_FcWf7-nvoos6YYhjXYVbAQ8jTTgmzG4Hx0GRcIausTW2__qKPBCmADXQ7NsJP2n7GVmteV1AaSMXjbJvwDx0FXXgRfNeUyWnFUelyGF_qD2hKJDk4jVSWHaYDvq4YE1wnjC9vcmIdRmdhPhfRz-e_L54ETUY2EPzM4c-85LcFBptftBGmVPECgk2czQ HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 3461658
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "5af85be503242e045f4d6f9e616badde5c5b664f"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-3461657/3461658
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/855f2db4e9.mp4?token=IF9xMJ-BdWShy7hghKtCp8BQdit5hrGtzhlH_BTbee6mSdXdUzFqyrviRJkyd666R_myA9_Ii34HX0mlVAN7Xdlow8vljSRfENxcLwxMCTk7VFhUICE3JvtWbatg75BAgKojhx6nZ9Gm0yjvBYZCha6SQo9gw4DB0JJ_Vr6F2o2nXb5CAno6HLpP3AsSXTlK9mXA97puBcPLWFsG_yzGW8zYwqzSCFYWUvzruRAdM61Np7_gOOJwm98cAvT0TnWPWI-QGUFPTysYj982vLg5phjskYItyxg3IIv6aG3-HwCxjIbnpzC1lFZzXXUUtpAMCj36uYK1hMpngvb-moZXOA
34.111.15.3206 Partial Content 55 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/855f2db4e9.mp4?token=IF9xMJ-BdWShy7hghKtCp8BQdit5hrGtzhlH_BTbee6mSdXdUzFqyrviRJkyd666R_myA9_Ii34HX0mlVAN7Xdlow8vljSRfENxcLwxMCTk7VFhUICE3JvtWbatg75BAgKojhx6nZ9Gm0yjvBYZCha6SQo9gw4DB0JJ_Vr6F2o2nXb5CAno6HLpP3AsSXTlK9mXA97puBcPLWFsG_yzGW8zYwqzSCFYWUvzruRAdM61Np7_gOOJwm98cAvT0TnWPWI-QGUFPTysYj982vLg5phjskYItyxg3IIv6aG3-HwCxjIbnpzC1lFZzXXUUtpAMCj36uYK1hMpngvb-moZXOA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
Hash 3fc53fecc52688bcfeff97ba6b51fe80
a4c018c8f889fbe1a237f71a77553c3218c9b311
35ec6c12e26bda1b4790469046aee70565638891ede334252447bdce0f964aec
GET /file/855f2db4e9.mp4?token=IF9xMJ-BdWShy7hghKtCp8BQdit5hrGtzhlH_BTbee6mSdXdUzFqyrviRJkyd666R_myA9_Ii34HX0mlVAN7Xdlow8vljSRfENxcLwxMCTk7VFhUICE3JvtWbatg75BAgKojhx6nZ9Gm0yjvBYZCha6SQo9gw4DB0JJ_Vr6F2o2nXb5CAno6HLpP3AsSXTlK9mXA97puBcPLWFsG_yzGW8zYwqzSCFYWUvzruRAdM61Np7_gOOJwm98cAvT0TnWPWI-QGUFPTysYj982vLg5phjskYItyxg3IIv6aG3-HwCxjIbnpzC1lFZzXXUUtpAMCj36uYK1hMpngvb-moZXOA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=4390912-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 17:20:23 GMT
cache-control: public,max-age=7200
etag: "af046d2388332d1c0763f78b2459a10cbec76d75"
content-type: video/mp4
content-range: bytes 4390912-4445795/4445796
content-length: 54884
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/d2b0ea893a.mp4?token=dn6TnuU6ZlEtw9Gtsuvpc8-XS_9l90ls4ZSWS9jf2O-3HpaNrHn6r94Qf2WKZX3MbPwxuHA8lsUXq2woO6yxw0rG6jlNGeIdO2ex2l0ywAOaU5E8Zesxr9c07GU1rtdJeVVzAk5CN5sz5HKuYeZV2m2MVFXijTniY1Xefor5bLC0ir0XoastuNpN6KNb2iCg9RtgWzucG1Pu-tcEqwq40it5EyofKVyd460ZXWoj_V1lQKnLdD52NEaMsPwQYUSYaTIU_09bZYde9vWpJ0iZD_D6gXaLhR9c9w4-tsiP7mrjIfBqBwmf7L1Dj5Dsjc_Ivs5uXpq-QLM3VGktamm4gw
34.111.15.3206 Partial Content 3.9 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/d2b0ea893a.mp4?token=dn6TnuU6ZlEtw9Gtsuvpc8-XS_9l90ls4ZSWS9jf2O-3HpaNrHn6r94Qf2WKZX3MbPwxuHA8lsUXq2woO6yxw0rG6jlNGeIdO2ex2l0ywAOaU5E8Zesxr9c07GU1rtdJeVVzAk5CN5sz5HKuYeZV2m2MVFXijTniY1Xefor5bLC0ir0XoastuNpN6KNb2iCg9RtgWzucG1Pu-tcEqwq40it5EyofKVyd460ZXWoj_V1lQKnLdD52NEaMsPwQYUSYaTIU_09bZYde9vWpJ0iZD_D6gXaLhR9c9w4-tsiP7mrjIfBqBwmf7L1Dj5Dsjc_Ivs5uXpq-QLM3VGktamm4gw
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 3.9 MB (3867014 bytes)
Hash 2fa714be167ea73de10a2c2a3b6f65c2
d5be54603b4ce2b77e6ec4be87095291d16abf68
52eafe4fbb1ff0e0b09bb249519c5333436cc0fa7e474263e7638c17a3bb5ef6
GET /file/d2b0ea893a.mp4?token=dn6TnuU6ZlEtw9Gtsuvpc8-XS_9l90ls4ZSWS9jf2O-3HpaNrHn6r94Qf2WKZX3MbPwxuHA8lsUXq2woO6yxw0rG6jlNGeIdO2ex2l0ywAOaU5E8Zesxr9c07GU1rtdJeVVzAk5CN5sz5HKuYeZV2m2MVFXijTniY1Xefor5bLC0ir0XoastuNpN6KNb2iCg9RtgWzucG1Pu-tcEqwq40it5EyofKVyd460ZXWoj_V1lQKnLdD52NEaMsPwQYUSYaTIU_09bZYde9vWpJ0iZD_D6gXaLhR9c9w4-tsiP7mrjIfBqBwmf7L1Dj5Dsjc_Ivs5uXpq-QLM3VGktamm4gw HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 3867014
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "9aa440f3d8727024e8b083af77538c6aec3d9f96"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-3867013/3867014
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/0282d8e479.mp4?token=q9jmODOTsaQIuDUB_lmbqkyBeTd_qUus0u6pzcpD4K4SmQnr3KW9lZ_knhDxM9CPKDTyV_LEUnk2qpMWgERn-21Q4EMXYe0o_V5GucSpt9pZFXYuY1EKIKwcy5TeuD_AM9TYtuyG4PN5T542OElSgE9JJw8TwhzMvr6FEjLgLB_SscG8lI-YN5jaWCB7wm-9RL7XMqnyJUfpPf6-RO8lBFdVqKZvF5UCNAHBYzB2nrOjA_N6Nlz_OyVkidK0kHusnpRSe7X1KNj6BDy6qhjHJrB7aZweqEz9wlmNWXIABMB1ttULVcX3EZgNlMWV7z-F5XeZkGBK4UVvGr3V2VRzSw
34.111.15.3206 Partial Content 4.1 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/0282d8e479.mp4?token=q9jmODOTsaQIuDUB_lmbqkyBeTd_qUus0u6pzcpD4K4SmQnr3KW9lZ_knhDxM9CPKDTyV_LEUnk2qpMWgERn-21Q4EMXYe0o_V5GucSpt9pZFXYuY1EKIKwcy5TeuD_AM9TYtuyG4PN5T542OElSgE9JJw8TwhzMvr6FEjLgLB_SscG8lI-YN5jaWCB7wm-9RL7XMqnyJUfpPf6-RO8lBFdVqKZvF5UCNAHBYzB2nrOjA_N6Nlz_OyVkidK0kHusnpRSe7X1KNj6BDy6qhjHJrB7aZweqEz9wlmNWXIABMB1ttULVcX3EZgNlMWV7z-F5XeZkGBK4UVvGr3V2VRzSw
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 4.1 MB (4065066 bytes)
Hash 2e85b5e2307ff9645b5f6a93d236f86b
4c183823ae0be799c067fe33aff252426782e74e
3c66d7f23a87aa8edb27263410897e62f1640b35f78d34981d758ddd02e0c950
GET /file/0282d8e479.mp4?token=q9jmODOTsaQIuDUB_lmbqkyBeTd_qUus0u6pzcpD4K4SmQnr3KW9lZ_knhDxM9CPKDTyV_LEUnk2qpMWgERn-21Q4EMXYe0o_V5GucSpt9pZFXYuY1EKIKwcy5TeuD_AM9TYtuyG4PN5T542OElSgE9JJw8TwhzMvr6FEjLgLB_SscG8lI-YN5jaWCB7wm-9RL7XMqnyJUfpPf6-RO8lBFdVqKZvF5UCNAHBYzB2nrOjA_N6Nlz_OyVkidK0kHusnpRSe7X1KNj6BDy6qhjHJrB7aZweqEz9wlmNWXIABMB1ttULVcX3EZgNlMWV7z-F5XeZkGBK4UVvGr3V2VRzSw HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 4065066
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "4c909e5e0fcc02227bf9c819fbf410563bd257a7"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-4065065/4065066
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/1fd9cbc654.mp4?token=q90p5jxcNMb_Yf9ROfsy81H9GAjB7CoeVgoO3KywDSRBao4HWhWex-byNGEKndKYqfw-uQDhRsgAjJjHMFfXtbaij9J32Gv49aYts1SF4tdGtUWudl21u6U1YqcCVqK2Ktawf6TM3d0OxmHYYnSARXmv8Bgu2KaUmnNx8fGBACcM0fnBuinsG3inPamBM1nE-TtlUUtX3CxG_3AD41AIVLxJCtH7MV2gL-p9yfeKl8c-q-4TjMsFylAswyJWpExQuOjs9uOLIVq4OxKu437hVM9Ojod93YLQbPJr25wy4NOKPMYVA3wlsgwPwt2ddOKTSFHIZH-xK7LPu5WScQDW3w
34.111.15.3206 Partial Content 4.7 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/1fd9cbc654.mp4?token=q90p5jxcNMb_Yf9ROfsy81H9GAjB7CoeVgoO3KywDSRBao4HWhWex-byNGEKndKYqfw-uQDhRsgAjJjHMFfXtbaij9J32Gv49aYts1SF4tdGtUWudl21u6U1YqcCVqK2Ktawf6TM3d0OxmHYYnSARXmv8Bgu2KaUmnNx8fGBACcM0fnBuinsG3inPamBM1nE-TtlUUtX3CxG_3AD41AIVLxJCtH7MV2gL-p9yfeKl8c-q-4TjMsFylAswyJWpExQuOjs9uOLIVq4OxKu437hVM9Ojod93YLQbPJr25wy4NOKPMYVA3wlsgwPwt2ddOKTSFHIZH-xK7LPu5WScQDW3w
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 4.7 MB (4670869 bytes)
Hash f91c61ea74714aa4c4b2b6fb2e67507e
5fb0a597a45b9336c6b51b078686af24d3e4a4e3
25c7027a58eb54cd4f3a08325350833ecd4ccac9a8541fbf903b1843c1e0853b
GET /file/1fd9cbc654.mp4?token=q90p5jxcNMb_Yf9ROfsy81H9GAjB7CoeVgoO3KywDSRBao4HWhWex-byNGEKndKYqfw-uQDhRsgAjJjHMFfXtbaij9J32Gv49aYts1SF4tdGtUWudl21u6U1YqcCVqK2Ktawf6TM3d0OxmHYYnSARXmv8Bgu2KaUmnNx8fGBACcM0fnBuinsG3inPamBM1nE-TtlUUtX3CxG_3AD41AIVLxJCtH7MV2gL-p9yfeKl8c-q-4TjMsFylAswyJWpExQuOjs9uOLIVq4OxKu437hVM9Ojod93YLQbPJr25wy4NOKPMYVA3wlsgwPwt2ddOKTSFHIZH-xK7LPu5WScQDW3w HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 4670869
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "85e0a6f6810faa162c0c515a8a66f9235717ef6d"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-4670868/4670869
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/1ceb2bf674.mp4?token=X3vGoYvcvINgY-6TmKYeuHGxcmf3GcbZH_T72_XjbAvMZQXfBgl9tGY7bN8YAoWhuxZzFL5MybTe4FzZfHp2gozj5_eGO13nNmOSDVI5Ci49v8Qvy-Fyiimy-sUJbWld205R9zoSzAAzT_YKYwLbpZyoNRzTRl1oaxclaTWe6mHqG0O1Ib5HLPMaiMRpFN2kO9F5_Wr316CuI7xzaOPDW2kIT5y7rEN4mJRiT_AYtZmDCxjQ_81RKYddzSSpotUwArpvQeXJaG-tIzZvERgEovtTDx20lOTqOunQFf89-TaZw6iTXbhKpQlD4iCLh2biN9K7pjzpEZS8Bat4DZdIlg
34.111.15.3206 Partial Content 5.2 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/1ceb2bf674.mp4?token=X3vGoYvcvINgY-6TmKYeuHGxcmf3GcbZH_T72_XjbAvMZQXfBgl9tGY7bN8YAoWhuxZzFL5MybTe4FzZfHp2gozj5_eGO13nNmOSDVI5Ci49v8Qvy-Fyiimy-sUJbWld205R9zoSzAAzT_YKYwLbpZyoNRzTRl1oaxclaTWe6mHqG0O1Ib5HLPMaiMRpFN2kO9F5_Wr316CuI7xzaOPDW2kIT5y7rEN4mJRiT_AYtZmDCxjQ_81RKYddzSSpotUwArpvQeXJaG-tIzZvERgEovtTDx20lOTqOunQFf89-TaZw6iTXbhKpQlD4iCLh2biN9K7pjzpEZS8Bat4DZdIlg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 5.2 MB (5236217 bytes)
Hash 2b3396e53b4121da9f19115b6fee1905
b906d7854629f0b3ae45d2f07dc8c28e9114c93c
d3e3dcc1bcaa0a6ff197aec163c3986396aaaee2d4f8e539b69fc87c5ee5446f
GET /file/1ceb2bf674.mp4?token=X3vGoYvcvINgY-6TmKYeuHGxcmf3GcbZH_T72_XjbAvMZQXfBgl9tGY7bN8YAoWhuxZzFL5MybTe4FzZfHp2gozj5_eGO13nNmOSDVI5Ci49v8Qvy-Fyiimy-sUJbWld205R9zoSzAAzT_YKYwLbpZyoNRzTRl1oaxclaTWe6mHqG0O1Ib5HLPMaiMRpFN2kO9F5_Wr316CuI7xzaOPDW2kIT5y7rEN4mJRiT_AYtZmDCxjQ_81RKYddzSSpotUwArpvQeXJaG-tIzZvERgEovtTDx20lOTqOunQFf89-TaZw6iTXbhKpQlD4iCLh2biN9K7pjzpEZS8Bat4DZdIlg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 5236217
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "6d3994aa24b6cf04365302fc1c46e9fb530feca3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-5236216/5236217
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/575079340d.mp4?token=Y6CCDaLjJgZ_X0g3IhoxkWFd4F2TgRNnVlB9V6XRoFkJJA_2OVi7maHIWaYqjDyvXDs90Tccdt5v9qCwn70t4FnledbVRn0Ilxa23xMbUOKAEpBqeRf9hopuVbIR0pPotCoc7le5zz8lHzoDKXks1OCRI8uxE7sHtO1bl8bOBH4XsT4mObxynYR9zqkGV0khD76EKmAcwvuPBvANf0sdplqV7Oa5OV8IL4DkvJJcVbhla0WqAq9sioXvC0nibep7EdyKS4w7wypmzny-GiAMnjPMSyufwNB8TJnlcqTnMHpRbFOJkfVZNViUujxFzE2epUpKh7PS0BSL8w8UC5Fedg
34.111.15.3206 Partial Content 4.8 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/575079340d.mp4?token=Y6CCDaLjJgZ_X0g3IhoxkWFd4F2TgRNnVlB9V6XRoFkJJA_2OVi7maHIWaYqjDyvXDs90Tccdt5v9qCwn70t4FnledbVRn0Ilxa23xMbUOKAEpBqeRf9hopuVbIR0pPotCoc7le5zz8lHzoDKXks1OCRI8uxE7sHtO1bl8bOBH4XsT4mObxynYR9zqkGV0khD76EKmAcwvuPBvANf0sdplqV7Oa5OV8IL4DkvJJcVbhla0WqAq9sioXvC0nibep7EdyKS4w7wypmzny-GiAMnjPMSyufwNB8TJnlcqTnMHpRbFOJkfVZNViUujxFzE2epUpKh7PS0BSL8w8UC5Fedg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 4.8 MB (4761086 bytes)
Hash c67600adcbeb4700d93e9fe02e84c108
f95c0d09ff1d6e6264d1c0eac8d6a6a2b91b0042
dcddf00a472a5b65172294172c8683ab7894912d8d4302988e6a54363ec796fa
GET /file/575079340d.mp4?token=Y6CCDaLjJgZ_X0g3IhoxkWFd4F2TgRNnVlB9V6XRoFkJJA_2OVi7maHIWaYqjDyvXDs90Tccdt5v9qCwn70t4FnledbVRn0Ilxa23xMbUOKAEpBqeRf9hopuVbIR0pPotCoc7le5zz8lHzoDKXks1OCRI8uxE7sHtO1bl8bOBH4XsT4mObxynYR9zqkGV0khD76EKmAcwvuPBvANf0sdplqV7Oa5OV8IL4DkvJJcVbhla0WqAq9sioXvC0nibep7EdyKS4w7wypmzny-GiAMnjPMSyufwNB8TJnlcqTnMHpRbFOJkfVZNViUujxFzE2epUpKh7PS0BSL8w8UC5Fedg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:24 GMT
content-type: video/mp4
content-length: 4761086
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "3b7959a91e009aa7b95dde6eb47b1fb6ba1b6afa"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-4761085/4761086
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/c5b1ce8872.mp4?token=QJJFiukWaHZI8DHU2ZsSwzYDquNAnMhsCPf-pnWJI3jmY1XA-QDKzi8AbFbV92tpMErv6J3HVBA4Isj_jCvVS5ux_vDBFfv0KlgEIHODKoNRreV4ZtdA8XLQr0V2xp-Slq_Ayi_9jJJiZaDKfFL8zT65QzTMh9xz-3saQIIAUSjkiD1ezBDyxIHGe1ndMA0WnKuAXBHVr6rLh_PZIa-SgvLS-25je5mo1J6udd1gOnZniE-HUFE2uuY8FQ6FlGdLDumxDdXouqB83ErlWigP3pYPNokobtAfV1dTCzQl1zvzm0U5q_eBJ5kiSWwWJN2HNrLYdWUwm19-gex2RAkaLg
34.111.15.3206 Partial Content 38 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/c5b1ce8872.mp4?token=QJJFiukWaHZI8DHU2ZsSwzYDquNAnMhsCPf-pnWJI3jmY1XA-QDKzi8AbFbV92tpMErv6J3HVBA4Isj_jCvVS5ux_vDBFfv0KlgEIHODKoNRreV4ZtdA8XLQr0V2xp-Slq_Ayi_9jJJiZaDKfFL8zT65QzTMh9xz-3saQIIAUSjkiD1ezBDyxIHGe1ndMA0WnKuAXBHVr6rLh_PZIa-SgvLS-25je5mo1J6udd1gOnZniE-HUFE2uuY8FQ6FlGdLDumxDdXouqB83ErlWigP3pYPNokobtAfV1dTCzQl1zvzm0U5q_eBJ5kiSWwWJN2HNrLYdWUwm19-gex2RAkaLg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
Hash 9b3cbc3109dea062305e1fff80534b7f
f8a7012258d69b57befe6b5c3dcff05484aa5afd
a5f3f8d496b03fe43d477fb57a73674aaa2484807a333e4a908c3cd6dbe4653e
GET /file/c5b1ce8872.mp4?token=QJJFiukWaHZI8DHU2ZsSwzYDquNAnMhsCPf-pnWJI3jmY1XA-QDKzi8AbFbV92tpMErv6J3HVBA4Isj_jCvVS5ux_vDBFfv0KlgEIHODKoNRreV4ZtdA8XLQr0V2xp-Slq_Ayi_9jJJiZaDKfFL8zT65QzTMh9xz-3saQIIAUSjkiD1ezBDyxIHGe1ndMA0WnKuAXBHVr6rLh_PZIa-SgvLS-25je5mo1J6udd1gOnZniE-HUFE2uuY8FQ6FlGdLDumxDdXouqB83ErlWigP3pYPNokobtAfV1dTCzQl1zvzm0U5q_eBJ5kiSWwWJN2HNrLYdWUwm19-gex2RAkaLg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=5111808-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 17:20:23 GMT
cache-control: public,max-age=7200
etag: "0ae20636990f1ea858602c162e0e4e0753819298"
content-type: video/mp4
content-range: bytes 5111808-5149779/5149780
content-length: 37972
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/af12613e0d.mp4?token=i-jUM7DVDqHxv4nf_H57YZOspsichRwiUDTt9SD92JMnhbdNSGzl4DQ-yQQgEkR8lrs9gsgMdg73VpMhELNSU1ROfJPW40jTnVp_1mh4btwuJO3z8KL0bElU6GoeJ0YV9X6IDynAphnL2zMmPOXNnln4qdg8Searphu41YiTDGI5zklvnQ5f9V3wae4_5s-SAOwqXyA-yF8AIE5jArOH7sBotmf_8l1PTZeGmAauPiNXaslNq0A6MRPDijp4JIUcYzQTnfcDYp9GeefEkw1XV6uSkpa1NueUro0lI_sgnHcqGTGPrp_Nrk-YT5rhCqXDqsDycUruliZy6q-U2wUueA
34.111.15.3206 Partial Content 4.6 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/af12613e0d.mp4?token=i-jUM7DVDqHxv4nf_H57YZOspsichRwiUDTt9SD92JMnhbdNSGzl4DQ-yQQgEkR8lrs9gsgMdg73VpMhELNSU1ROfJPW40jTnVp_1mh4btwuJO3z8KL0bElU6GoeJ0YV9X6IDynAphnL2zMmPOXNnln4qdg8Searphu41YiTDGI5zklvnQ5f9V3wae4_5s-SAOwqXyA-yF8AIE5jArOH7sBotmf_8l1PTZeGmAauPiNXaslNq0A6MRPDijp4JIUcYzQTnfcDYp9GeefEkw1XV6uSkpa1NueUro0lI_sgnHcqGTGPrp_Nrk-YT5rhCqXDqsDycUruliZy6q-U2wUueA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
Size 4.6 MB (4582673 bytes)
Hash ac77b2f0cae4c7cbafe5c27a0c43a0af
13a08238d58175155365dfdee87721482dfb96bd
3e1ea68a8c658e5034c023c68c58f35f038725027610abbaa052a50d4e1c9727
GET /file/af12613e0d.mp4?token=i-jUM7DVDqHxv4nf_H57YZOspsichRwiUDTt9SD92JMnhbdNSGzl4DQ-yQQgEkR8lrs9gsgMdg73VpMhELNSU1ROfJPW40jTnVp_1mh4btwuJO3z8KL0bElU6GoeJ0YV9X6IDynAphnL2zMmPOXNnln4qdg8Searphu41YiTDGI5zklvnQ5f9V3wae4_5s-SAOwqXyA-yF8AIE5jArOH7sBotmf_8l1PTZeGmAauPiNXaslNq0A6MRPDijp4JIUcYzQTnfcDYp9GeefEkw1XV6uSkpa1NueUro0lI_sgnHcqGTGPrp_Nrk-YT5rhCqXDqsDycUruliZy6q-U2wUueA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=32768-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 17:20:23 GMT
cache-control: public,max-age=7200
etag: "242f642f3d131a4789207b829e8c7899a3e3fa9e"
content-type: video/mp4
content-range: bytes 32768-4615440/4615441
content-length: 4582673
age: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/65c33a48a9.mp4?token=fLS1XUW8WkyAPaJOuA-mo_Q5EZ2v9DCSMyODmkxFWi_Rr86fLiqZukVmNeGyaTmh49PwAgZOFcoemXfhHX0Ys6Z4jSGYMk116qcwMkIhicInvdVY7Hm89XOsmrKjJ91SeTX3P768g96QOD_vOWBxlEwmyJRaAGKVWRG7V1gwnMJJHzqk-3XCok0SKKBdVRqJZzOScJ5GVvdrNp6I2EtF-D8wr0Fw917xEcUNS0L_05k7XmjafPqgO2BeT3SmLRyU49ua8vew9BJ3RhGtPhCnyw7zgFjDESOCzFDaJxRBWAhAhyVO5pRb-_i5zKmmtlChLcp9Fqj0WEypCSZM4Xo0qg
34.111.15.3206 Partial Content 52 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/65c33a48a9.mp4?token=fLS1XUW8WkyAPaJOuA-mo_Q5EZ2v9DCSMyODmkxFWi_Rr86fLiqZukVmNeGyaTmh49PwAgZOFcoemXfhHX0Ys6Z4jSGYMk116qcwMkIhicInvdVY7Hm89XOsmrKjJ91SeTX3P768g96QOD_vOWBxlEwmyJRaAGKVWRG7V1gwnMJJHzqk-3XCok0SKKBdVRqJZzOScJ5GVvdrNp6I2EtF-D8wr0Fw917xEcUNS0L_05k7XmjafPqgO2BeT3SmLRyU49ua8vew9BJ3RhGtPhCnyw7zgFjDESOCzFDaJxRBWAhAhyVO5pRb-_i5zKmmtlChLcp9Fqj0WEypCSZM4Xo0qg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
Hash f34ab4b4a20628582a9a73c0217ab0f6
3b79dcdda6486d6189334ed8ae41e4712069d1d4
729ff5cd30ea8dcd8804c903b78ead433273d15d5741eb7a85628f7f9046991c
GET /file/65c33a48a9.mp4?token=fLS1XUW8WkyAPaJOuA-mo_Q5EZ2v9DCSMyODmkxFWi_Rr86fLiqZukVmNeGyaTmh49PwAgZOFcoemXfhHX0Ys6Z4jSGYMk116qcwMkIhicInvdVY7Hm89XOsmrKjJ91SeTX3P768g96QOD_vOWBxlEwmyJRaAGKVWRG7V1gwnMJJHzqk-3XCok0SKKBdVRqJZzOScJ5GVvdrNp6I2EtF-D8wr0Fw917xEcUNS0L_05k7XmjafPqgO2BeT3SmLRyU49ua8vew9BJ3RhGtPhCnyw7zgFjDESOCzFDaJxRBWAhAhyVO5pRb-_i5zKmmtlChLcp9Fqj0WEypCSZM4Xo0qg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=6455296-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Tue, 07 Nov 2023 17:20:23 GMT
cache-control: public,max-age=7200
etag: "c5447ca61b027b0dd35a7df69d71881454b58439"
content-type: video/mp4
content-range: bytes 6455296-6507067/6507068
content-length: 51772
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/414e2594e0.mp4?token=I53u_n2gnYmqZKXTcErjr5uuNsoAPSk-Sd6pba10CCXd_2gwtUVy0UZwfrQxmKu-99cUHsGYOcdyWbWcv4DdOsxplG3ZBJOq0tOuQ0-VBqNW7RgQjGrsyPW3C0OFaUgMKctRJelYJ8i_2-pOloHI-j9YCfhRMGIa63vKWBzOwleuZ4p1RDBK5L1a9xlRM7ncrm0oiWQkUXWikLScBK6AZehuBOr5upT_mL4NgKfxBtVHS0eBIIKxOyEauCsI03Rvp43n8VIuHzD7ls_GLyGMVm0rUr88BvIjMOrSmFonnMx6kVGfUIk03V_weaT3NEJ7E_xgjVQqfy9otzq7vXGQdg
34.111.15.3206 Partial Content 4.7 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/414e2594e0.mp4?token=I53u_n2gnYmqZKXTcErjr5uuNsoAPSk-Sd6pba10CCXd_2gwtUVy0UZwfrQxmKu-99cUHsGYOcdyWbWcv4DdOsxplG3ZBJOq0tOuQ0-VBqNW7RgQjGrsyPW3C0OFaUgMKctRJelYJ8i_2-pOloHI-j9YCfhRMGIa63vKWBzOwleuZ4p1RDBK5L1a9xlRM7ncrm0oiWQkUXWikLScBK6AZehuBOr5upT_mL4NgKfxBtVHS0eBIIKxOyEauCsI03Rvp43n8VIuHzD7ls_GLyGMVm0rUr88BvIjMOrSmFonnMx6kVGfUIk03V_weaT3NEJ7E_xgjVQqfy9otzq7vXGQdg
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 4.7 MB (4658152 bytes)
Hash 15284608d378cde0c4334b0f7db9e65c
8af5a764250bf469e2cce3dcaa87ce0ed32ec613
4630e2e87d92796560c453637403c0a85a028d7f53c6fa086f99f638d6e4090f
GET /file/414e2594e0.mp4?token=I53u_n2gnYmqZKXTcErjr5uuNsoAPSk-Sd6pba10CCXd_2gwtUVy0UZwfrQxmKu-99cUHsGYOcdyWbWcv4DdOsxplG3ZBJOq0tOuQ0-VBqNW7RgQjGrsyPW3C0OFaUgMKctRJelYJ8i_2-pOloHI-j9YCfhRMGIa63vKWBzOwleuZ4p1RDBK5L1a9xlRM7ncrm0oiWQkUXWikLScBK6AZehuBOr5upT_mL4NgKfxBtVHS0eBIIKxOyEauCsI03Rvp43n8VIuHzD7ls_GLyGMVm0rUr88BvIjMOrSmFonnMx6kVGfUIk03V_weaT3NEJ7E_xgjVQqfy9otzq7vXGQdg HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:24 GMT
content-type: video/mp4
content-length: 4658152
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "d23faa3107ca390123839be37264e39afd4e33f9"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-4658151/4658152
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn1.cdn-telegram.org/file/0c3eacc3ad.mp4?token=DJ5cjkMOluKm6AO34R4u-WdFHb4XXZEfbInsxxEfbu6Csiqs1J6xY2Wp33_Hk9CL3X5IcC6fqd3BtdWzPoBTM_IeCoiV_2Am-Hthyh0mh2NELBPRcxnHa5yZvTxNP8doyzr3CaQocYRaiAMM4xzDEXqNCFCgDfCOUeKNW4n7vkpK6wwEWk2R6uK_Wz8wPrJUApCzW7iCnLLHMoyqbbHPSJ6xScC2gnHHYio9lKIw2g4M5NdpRjVU2yG6FPVprP3rJ2gVlLoYq1HPfg7r0MEnv2_iw3EmntnQlgM9xkER1sVNNHyyBA-AIl9LWYIdJHx-fdaZA9lpGc_DPxgebzknVw
34.111.15.3206 Partial Content 5.5 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/0c3eacc3ad.mp4?token=DJ5cjkMOluKm6AO34R4u-WdFHb4XXZEfbInsxxEfbu6Csiqs1J6xY2Wp33_Hk9CL3X5IcC6fqd3BtdWzPoBTM_IeCoiV_2Am-Hthyh0mh2NELBPRcxnHa5yZvTxNP8doyzr3CaQocYRaiAMM4xzDEXqNCFCgDfCOUeKNW4n7vkpK6wwEWk2R6uK_Wz8wPrJUApCzW7iCnLLHMoyqbbHPSJ6xScC2gnHHYio9lKIw2g4M5NdpRjVU2yG6FPVprP3rJ2gVlLoYq1HPfg7r0MEnv2_iw3EmntnQlgM9xkER1sVNNHyyBA-AIl9LWYIdJHx-fdaZA9lpGc_DPxgebzknVw
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 5.5 MB (5524790 bytes)
Hash 981a0a6668accd2a3d4acf58d80a4e71
f25d9ec66ad0e51e047481f58aff22ce0d71fefe
f1ea8acc780589c648dad99652f4100c7c44d73c8686ffdd8285957bbe910a08
GET /file/0c3eacc3ad.mp4?token=DJ5cjkMOluKm6AO34R4u-WdFHb4XXZEfbInsxxEfbu6Csiqs1J6xY2Wp33_Hk9CL3X5IcC6fqd3BtdWzPoBTM_IeCoiV_2Am-Hthyh0mh2NELBPRcxnHa5yZvTxNP8doyzr3CaQocYRaiAMM4xzDEXqNCFCgDfCOUeKNW4n7vkpK6wwEWk2R6uK_Wz8wPrJUApCzW7iCnLLHMoyqbbHPSJ6xScC2gnHHYio9lKIw2g4M5NdpRjVU2yG6FPVprP3rJ2gVlLoYq1HPfg7r0MEnv2_iw3EmntnQlgM9xkER1sVNNHyyBA-AIl9LWYIdJHx-fdaZA9lpGc_DPxgebzknVw HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 5524790
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "5df508dace58509ea860d041b97b53b29eb1dfb9"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-5524789/5524790
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
telegram.org/js/tgsticker.js?31
149.154.167.99200 OK 25 kB URL GET HTTP/2 telegram.org/js/tgsticker.js?31
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
Hash 1400a5f5bb460526b907b489c84ac96a
1cdb62d2b39eff966e96a476f72704bc86591036
42d42f23d7276824168808093be0f20e3e53673718c79349cc22da88f58d3e23
GET /js/tgsticker.js?31 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: application/javascript
last-modified: Wed, 29 Mar 2023 11:31:32 GMT
etag: W/"64242194-601c"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
149.154.167.99200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11072, version 1.0\012- data
Hash e7df3d0942815909add8f9d0c40d00d9
cf5032eea3399a58870e8a05e629b006a8c7c3c7
bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--r1a.website
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: application/octet-stream
content-length: 11072
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b40"
expires: Sat, 11 Nov 2023 17:20:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/tgme/pattern.svg?1
149.154.167.99200 OK 232 kB URL GET HTTP/2 telegram.org/img/tgme/pattern.svg?1
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 232 kB (231706 bytes)
Hash d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram-web.css?37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Sat, 11 Nov 2023 17:20:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/telegram-web.css?37
149.154.167.99200 OK 27 kB URL GET HTTP/2 telegram.org/css/telegram-web.css?37
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (877)
Hash 74290f2b02c5ebfab7f60aa7f8e9df57
bf38f97543e15b8665778b4724ca88065aea0f8c
f5569fd592a9f98733b42e918680b19ddcab0d5cf365d001b4ade87cf84968ba
GET /css/telegram-web.css?37 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: text/css
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-6b31"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn1.cdn-telegram.org/file/VlVWF7BcIxFnjwS1TFEFEIyD3YiAOnjYy_ZI7veDiuv2agqGYLDsBXR89hpNN1_uyINdsNuU_FSI_6MVxKXLnOCw9nGv7H-ptmU48awW1rLck0iXEtQKpAUXs7vchxsheGY6lYuH7O7e5YRK7EsRbNB_5t2njYvfYAmWHdVBrp-7KderNWxeQypItH_merEbf5wc5mIi6aFsQGsic0-Iy9fJasMXuHjUVOt1LCsHg9HjAqGkM5iC24eyRSYwaUCD7L_LLsxf3o_jfgQVWZ1KUN8CqZ-RilWJD-aeQB1VZ31CAe_0GE0UM0LP91kfVygYIP9OWkpU-KlK22ftp6-sEA
34.111.15.3200 OK 12 kB URL GET HTTP/3 cdn1.cdn-telegram.org/file/VlVWF7BcIxFnjwS1TFEFEIyD3YiAOnjYy_ZI7veDiuv2agqGYLDsBXR89hpNN1_uyINdsNuU_FSI_6MVxKXLnOCw9nGv7H-ptmU48awW1rLck0iXEtQKpAUXs7vchxsheGY6lYuH7O7e5YRK7EsRbNB_5t2njYvfYAmWHdVBrp-7KderNWxeQypItH_merEbf5wc5mIi6aFsQGsic0-Iy9fJasMXuHjUVOt1LCsHg9HjAqGkM5iC24eyRSYwaUCD7L_LLsxf3o_jfgQVWZ1KUN8CqZ-RilWJD-aeQB1VZ31CAe_0GE0UM0LP91kfVygYIP9OWkpU-KlK22ftp6-sEA
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x320, components 3\012- data
Hash 7afad76ef72cb94062cd08026559293a
59a1b3e573958f3273c05a02cceec7dd4f9c8334
08b393cb87f028c1e6c12c346fbd70f7a9eee8b97d000ffe8a8fcbbde5f1eac2
GET /file/VlVWF7BcIxFnjwS1TFEFEIyD3YiAOnjYy_ZI7veDiuv2agqGYLDsBXR89hpNN1_uyINdsNuU_FSI_6MVxKXLnOCw9nGv7H-ptmU48awW1rLck0iXEtQKpAUXs7vchxsheGY6lYuH7O7e5YRK7EsRbNB_5t2njYvfYAmWHdVBrp-7KderNWxeQypItH_merEbf5wc5mIi6aFsQGsic0-Iy9fJasMXuHjUVOt1LCsHg9HjAqGkM5iC24eyRSYwaUCD7L_LLsxf3o_jfgQVWZ1KUN8CqZ-RilWJD-aeQB1VZ31CAe_0GE0UM0LP91kfVygYIP9OWkpU-KlK22ftp6-sEA HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: image/jpeg
content-length: 12054
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "fc860938ef9bbc217da569cc7cf656b7f9826cbe"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
104.18.11.207200 OK 141 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
IP 104.18.11.207:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65324)
Size 141 kB (140936 bytes)
Hash 04aca1f4cd3ec3c05a75a879f3be75a3
675fcf28f9fbf37139d3b2c0b676f96f601a4203
7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11
GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xn--r1a.website
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"04aca1f4cd3ec3c05a75a879f3be75a3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 07/30/2023 11:18:37
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 756
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 84e1cd198ca8a7461e7d0eeb825d96e4
cdn-cache: HIT
cf-cache-status: HIT
age: 573907
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82273f1b2ce1b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
telegram.org/js/jquery.min.js
149.154.167.99200 OK 96 kB URL GET HTTP/2 telegram.org/js/jquery.min.js
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /js/jquery.min.js HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: application/javascript
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-1762a"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/widget-frame.css?66
149.154.167.99200 OK 83 kB URL GET HTTP/2 telegram.org/css/widget-frame.css?66
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (1653)
Hash f80deb4a4fc00fa54cf4a1617ffaad1e
52f5528aa59e0ad22c5103318a86a4c421d45b34
d61214fdf1c1eee41b83cb56d52b82db20a47bfeab5248bb6fda7a4f0744eedf
GET /css/widget-frame.css?66 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2023 17:42:21 GMT
etag: W/"64286cfd-1456a"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/jquery-ui.min.js
149.154.167.99200 OK 99 kB URL GET HTTP/2 telegram.org/js/jquery-ui.min.js
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (32228)
Hash fcf956f8fd2371fef081125fbd1cd1b0
59dc043c3191c85c23244cc5b09f422585296abf
eb46d82ef6f86859f18e379660e0f45b85c6f69fa97111905f0c125a08506376
GET /js/jquery-ui.min.js HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: application/javascript
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-181a9"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
149.154.167.99200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--r1a.website
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Sat, 11 Nov 2023 17:20:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.cdn-telegram.org/file/3cfcd2ea2f.mp4?token=vDwZyl2leizWOKAPNd2RtQKKMXaTzEBmMdnh9CvMktEEY3vzt5vMacMkWYEZZTrEx6d2I4jMp7UzoDcXPanCn3JX1YFfwEz8Bo2DFvgmsR6fkbYwB-fFWj7PWGOspZLWn6KdPkz_bL5HpuDOP7MoXZQ0gK89GArj63qi8LaJzAdUxAu1OU0QFXP6666idXjGxyxMt74PsER4BmSXD4qF10g4Opt9huscGpyk-P6QfrVlpfm81cJ00MpYHVsXQRBaI4Lp0aS_yPzrevWYpERRNkxI2BfIbE6yESryoBHqFSxpN8DeiL5T7a6UOBR8_xzR9_mQe7uwiHWL8g0XIShUPQ
34.111.15.3206 Partial Content 4.3 MB URL GET HTTP/3 cdn1.cdn-telegram.org/file/3cfcd2ea2f.mp4?token=vDwZyl2leizWOKAPNd2RtQKKMXaTzEBmMdnh9CvMktEEY3vzt5vMacMkWYEZZTrEx6d2I4jMp7UzoDcXPanCn3JX1YFfwEz8Bo2DFvgmsR6fkbYwB-fFWj7PWGOspZLWn6KdPkz_bL5HpuDOP7MoXZQ0gK89GArj63qi8LaJzAdUxAu1OU0QFXP6666idXjGxyxMt74PsER4BmSXD4qF10g4Opt9huscGpyk-P6QfrVlpfm81cJ00MpYHVsXQRBaI4Lp0aS_yPzrevWYpERRNkxI2BfIbE6yESryoBHqFSxpN8DeiL5T7a6UOBR8_xzR9_mQe7uwiHWL8g0XIShUPQ
IP 34.111.15.3:443
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
Size 4.3 MB (4294967 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /file/3cfcd2ea2f.mp4?token=vDwZyl2leizWOKAPNd2RtQKKMXaTzEBmMdnh9CvMktEEY3vzt5vMacMkWYEZZTrEx6d2I4jMp7UzoDcXPanCn3JX1YFfwEz8Bo2DFvgmsR6fkbYwB-fFWj7PWGOspZLWn6KdPkz_bL5HpuDOP7MoXZQ0gK89GArj63qi8LaJzAdUxAu1OU0QFXP6666idXjGxyxMt74PsER4BmSXD4qF10g4Opt9huscGpyk-P6QfrVlpfm81cJ00MpYHVsXQRBaI4Lp0aS_yPzrevWYpERRNkxI2BfIbE6yESryoBHqFSxpN8DeiL5T7a6UOBR8_xzR9_mQe7uwiHWL8g0XIShUPQ HTTP/1.1
Host: cdn1.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:23 GMT
content-type: video/mp4
content-length: 4294967
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "7f975845fae37486192bc622236e3d9bfff38724"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-4294966/4294967
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
telegram.org/js/tgwallpaper.min.js?3
149.154.167.99200 OK 3.0 kB URL GET HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Requested by https://xn--r1a.website/s/telegram
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (2998), with no line terminators
Hash f03422dc797fd26a3834b1ec041128ed
a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a
046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 07 Nov 2023 17:20:22 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Sat, 11 Nov 2023 17:20:22 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2